* Fix XSS bug: Properly encode title used in Quick/Bulk Edit, and offer additional sanitization to various fields. Affects users of the Author or Contributor role. * Fix XSS bug: Preserve tag escaping in the tags meta box. Affects users of the Author or Contributor role. * Fix potential information disclosure of posts through the media uploader. Affects users of the Author role. * Enhancement: Force HTML filtering on comment text in the admin * Enhancement: Harden check_admin_referer() when called without arguments, which plugins should avoid. * Update the license to GPLv2 (or later) and update copyright information for the KSES library. |
||
---|---|---|
.. | ||
files | ||
DESCR | ||
distinfo | ||
Makefile | ||
MESSAGE | ||
options.mk | ||
PLIST |