Add the security fix to the changelog

This commit is contained in:
tusooa 2023-03-01 18:44:29 -05:00
parent e4925f813a
commit 938e238ea1
No known key found for this signature in database
GPG key ID: 7B467EDE43A08224

View file

@ -20,6 +20,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
- Allow customizing instance languages
### Fixed
- Security: uploading HTTP endpoint can no longer create directories in the upload dir (internal APIs, like backup, still can do it.)
- ~ character in urls in Markdown posts are handled properly
- Exiftool upload filter will now ignore SVG files
- Fix `block_from_stranger` setting