From a8aff8d30187301b75fd94dca36855adb441f8a4 Mon Sep 17 00:00:00 2001 From: Juuso Lapinlampi Date: Sun, 29 May 2016 11:07:39 +0000 Subject: CHANGELOG: Move 1.0.0+8757e9a XSS to security section Per "Keep a CHANGELOG" guideline. See: http://keepachangelog.com/ --- CHANGELOG.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 345c254..4ddf51a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -260,8 +260,6 @@ No formal release. - Reduntant `settings.inc.php` inclusion twice in `upload.php`. (benwaffle) - Moe panel incorrectly returning 5 entries instead of none in search while there's no search query. (benwaffle) -- Cross-site scripting vulnerability in moe panel from arbitrary `originalname`. - No CVE requested. Reported by Juuso Lapinlampi. (Eric Johansson) - Copy-pasted code rolled into a `for` loop in `generate_name`. (Michael "wafflestealer654") - HTML validation for `case 413` in `pomf.js`. (cenci0) @@ -276,6 +274,11 @@ No formal release. - Unused `get_crc32` function in `UploadedFile.class.php`. Reported by Juuso Lapinlampi. (Eric Johansson) +### Security + +- Cross-site scripting vulnerability in moe panel from arbitrary `originalname`. + No CVE requested. Reported by Juuso Lapinlampi. (Eric Johansson) + ## `v1.0.0` - 2013-10-31 Initial unofficial release in `nokonoko/Pomf`. Changes are since initial commit. -- cgit v1.2.3