v1.23.0

Mailtrain-org · Mar 19, 2017 · 77aded3 · 77aded3
1 parent ae6affd
commit 77aded3
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/CHANGELOG.txt b/CHANGELOG.txt
@@ -1,5 +1,12 @@
 # Changelog
 
+## 1.23.0 2017-03-19
+
+  * Fixed security issue where description tags were able to include script tags. Reported by Andreas Lindh. Fixed with [ae6affda]
+  * Fixed security issue where templates that looked like file paths loaded content from arbitrary files. Reported by Andreas Lindh. Fixed with [0879fa41]
+  * Fixed security issue where users were able to use html tags in subscription values. Reported by Andreas Lindh. Fixed with [9d5fb816]
+  * Support for multiple HTML editors (Mosaico, GrapeJS, Summernote, HTML code)
+
 ## 1.22.0 2017-03-02
 
   * Reverted license back to GPL-v3 to support Mosaico

diff --git a/package.json b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "mailtrain",
   "private": true,
-  "version": "1.22.0",
+  "version": "1.23.0",
   "description": "Self hosted email newsletter app",
   "main": "index.js",
   "scripts": {