Commit 7b70fa1
committed
Language files and complete history for 4.5.0.
git-svn-id: http://textpattern.googlecode.com/svn/development/4.x@4074 2fea6a4d-a838-0410-917b-93a53c48e9d21 parent 6038fcf commit 7b70fa1
4 files changed
Lines changed: 644 additions & 470 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -3,7 +3,7 @@ Changes in 4.5.0 | |||
| 3 | 3 | * Minimum system requirement: PHP 5.2 | |
| 4 | 4 | * Modern default site theme (responsive, HTML5, CSS3) | |
| 5 | 5 | * Choice of HTML5 or XHTML document type as a preference | |
| 6 | - * Textile 2.4. See full changelog at http://textpattern.com/textile-changelog | ||
| 6 | + * Textile 2.4.1. See full changelog at http://textpattern.com/textile-changelog | ||
| 7 | 7 | * User interface realignment and clean-up | |
| 8 | 8 | * Additional admin theme (Hive) | |
| 9 | 9 | * Beautified setup process | |
@@ -38,6 +38,9 @@ Changes in 4.5.0 | |||
| 38 | 38 | * Developer: Additional plugin types '4' (admin-side, only for AJAX requests), and '5' (public side; admin-side, only for AJAX requests). | |
| 39 | 39 | * Security: Admin-side disallows framing, sends "X-Frame-Options: SAMEORIGIN" header. | |
| 40 | 40 | * Security: The 'txp_login' cookie is set with a 'HttpOnly' attribute. | |
| 41 | + * Security: Fixed a persistent XSS vulnerability in Textile discovered by Mauro Gentile. | ||
| 42 | + * Security: Fixed a XSS vulnerability in the setup process discovered by Jonathan Claudius of Trustwave SpiderLabs. | ||
| 43 | + * Security: Fixed a persistent XSS vulnerability in the access log panel discovered by Sasha Zivojinovic. | ||
| 41 | 44 | * Bug and security fixes | |
| 42 | 45 | * jQuery 1.7.2 | |
| 43 | 46 | ||
0 commit comments