Changelog for URL cleaner improvement

SHA - 4ea768d
jhy · Aug 24, 2022 · d2d9ac3 · d2d9ac3
1 parent 4ea768d
commit d2d9ac3
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/CHANGES b/CHANGES
@@ -1,6 +1,10 @@
 jsoup changelog
 
-Release 1.15.3 [PENDING]
+Release 1.15.3 [2022-Aug-24]
+  * Security: fixed an issue where the jsoup cleaner may incorrectly sanitize crafted XSS attempts if
+    SafeList.preserveRelativeLinks is enabled.
+    <https://github.com/jhy/jsoup/security/advisories/GHSA-gp7f-rwcx-9369>
+
   * Improvement: the Cleaner will preserve the source position of cleaned elements, if source tracking is enabled in the
     original parse.