pleroma

commit: 938e238ea10f2e56316650892ad6ba1dd46b3ea5
parent e4925f813afda5883fd12a48b99b2b12f83678d9
Author: tusooa <tusooa@kazv.moe>
Date:   Wed,  1 Mar 2023 18:44:29 -0500

Add the security fix to the changelog

Diffstat:
M
CHANGELOG.md
1
+

1 file changed, 1 insertion(+), 0 deletions(-)
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -20,6 +20,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Allow customizing instance languages
 
 ### Fixed
+- Security: uploading HTTP endpoint can no longer create directories in the upload dir (internal APIs, like backup, still can do it.)
 - ~ character in urls in Markdown posts are handled properly
 - Exiftool upload filter will now ignore SVG files
 - Fix `block_from_stranger` setting