diff options
| author | Juuso Lapinlampi <wub@partyvan.eu> | 2016-05-29 13:07:39 +0200 |
|---|---|---|
| committer | Juuso Lapinlampi <wub@partyvan.eu> | 2016-05-29 13:11:57 +0200 |
| commit | a8aff8d30187301b75fd94dca36855adb441f8a4 (patch) | |
| tree | ac7290e3da75b54c4fdd09bccf65ab868352a6ce /CHANGELOG.md | |
| parent | 0655056b8973127cbf1e44c17ad490089f05d83a (diff) | |
CHANGELOG: Move 1.0.0+8757e9a XSS to security section
Per "Keep a CHANGELOG" guideline.
See: http://keepachangelog.com/
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 345c254..4ddf51a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -260,8 +260,6 @@ No formal release. - Reduntant `settings.inc.php` inclusion twice in `upload.php`. (benwaffle) - Moe panel incorrectly returning 5 entries instead of none in search while there's no search query. (benwaffle) -- Cross-site scripting vulnerability in moe panel from arbitrary `originalname`. - No CVE requested. Reported by Juuso Lapinlampi. (Eric Johansson) - Copy-pasted code rolled into a `for` loop in `generate_name`. (Michael "wafflestealer654") - HTML validation for `case 413` in `pomf.js`. (cenci0) @@ -276,6 +274,11 @@ No formal release. - Unused `get_crc32` function in `UploadedFile.class.php`. Reported by Juuso Lapinlampi. (Eric Johansson) +### Security + +- Cross-site scripting vulnerability in moe panel from arbitrary `originalname`. + No CVE requested. Reported by Juuso Lapinlampi. (Eric Johansson) + ## `v1.0.0` - 2013-10-31 Initial unofficial release in `nokonoko/Pomf`. Changes are since initial commit. |