tonyair
/
silverstripe-framework
mirror of https://github.com/silverstripe/silverstripe-framework
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
silverstripe-framework/docs/en/changelogs/2.3.13.md

845 B
Raw Blame History

2.3.13 (2012-02-01)

Overview

  • Security: Cross-site scripting on text transformations in templates
  • Security: Cross-site scripting (XSS) related to page titles in the CMS

Upgrading Notes

See 2.4.7.

Changelog

Bugfixes

  • 2012-01-31 15e9e05 Casting return values on text helper methods in StringField, Text, Varchar (Ingo Schommer)
  • 2009-05-26 acf9e01 Don't break CMS tree if HTML gets into MenuTitle (Sam Minnee)

Other

  • 2012-01-31 475e077 SECURITY Sanitize messages passed to generated JS calls in FormResponse::status_message(), e.g. to avoid XSS on 'Successfully published <page title>' messages (Ingo Schommer)