silverstripe-framework/docs/en/changelogs/3.0.9.md

# 3.0.9

## Overview

 * Security: Require ADMIN for ?flush=1&isDev=1 ([SS-2014-001](http://www.silverstripe.org/ss-2014-001-require-admin-for-flush1-and-isdev1))
 * Security: XSS in third party library (SWFUpload) ([SS-2014-002](http://www.silverstripe.org/ss-2014-002-xss-in-third-party-library-swfupload/))

## Changelog

 * [framework](https://github.com/silverstripe/silverstripe-framework/releases/tag/3.0.9)
 * [cms](https://github.com/silverstripe/silverstripe-framework/releases/tag/3.0.9)
 * [installer](https://github.com/silverstripe/silverstripe-framework/releases/tag/3.0.9)