diff options
| author | Michael Williamson <mike@zwobble.org> | 2026-08-28 14:39:48 +0100 |
|---|---|---|
| committer | Michael Williamson <mike@zwobble.org> | 2026-08-28 14:39:48 +0100 |
| commit | 31f0c370be4b95ac4fa285fea3be970606735f16 (patch) | |
| tree | c774a0195cb32e8ff95632f72630a7ca15306fef /NEWS | |
| parent | e3b9cecdaa3df0d9007ed7b06add53c65516e429 (diff) | |
Avoid prototype pollution when reading styles
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -1,3 +1,9 @@ +# 1.12.2 + +* Avoid prototype pollution when reading the styles defined in a document. This + avoids an issue where a maliciously crafted document could be used to set + externalFileAccess to true. + # 1.12.1 * Fix: on Windows, when an image's content type includes a backslash in the |