From 987c5b59d3929befeab306f5e6c79de0b6fd6ad4 Mon Sep 17 00:00:00 2001 From: Thomas Citharel Date: Thu, 7 Dec 2023 14:55:16 +0100 Subject: [PATCH] chore(release): 4.0.2 Signed-off-by: Thomas Citharel --- CHANGELOG.md | 14 ++++++++++++++ mix.exs | 2 +- package.json | 2 +- 3 files changed, 16 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 9cb02382..6fd40709 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,20 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## 4.0.2 (2023-12-07) + +### Security issues + +This release fixes different security issues reported by the potsda.mn collective. Please make sure to upgrade as soon as possible. + +### Fixed + +- Fixes XSS issues in notifier and participant and event contacts list formatting + + +* fix(front-end): add more security fixes for formatted lists and notifier ([1af8e37](https://framagit.org/framasoft/mobilizon/commits/1af8e37)) + + ## 4.0.1 (2023-12-07) ### Security issues diff --git a/mix.exs b/mix.exs index dc4a0e4e..27fde9da 100644 --- a/mix.exs +++ b/mix.exs @@ -1,7 +1,7 @@ defmodule Mobilizon.Mixfile do use Mix.Project - @version "4.0.1" + @version "4.0.2" def project do [ diff --git a/package.json b/package.json index 77c88ae6..809abd5f 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "mobilizon", - "version": "4.0.1", + "version": "4.0.2", "private": true, "scripts": { "dev": "vite",