diff options
| author |  Alexandre Alapetite <alexandre.alapetite@alexandra.dk>
| 2016-09-07 14:38:52 +0200 |
|---|---|---|
| committer | Alexandre Alapetite <alexandre.alapetite@alexandra.dk>
| 2016-09-07 14:38:52 +0200 |
| commit | 6450839b87b6a05b71af87490325acda9ffd5a44 (patch) | |
| tree | 4cedb64d5d7430d74bdfecfcaeacbf8a5fef73c6 | |
| parent | 8a776f146182bc6870702cfeb87041e3af66b24b (diff) | |
Changelog noopener
| -rw-r--r-- | CHANGELOG.md | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index c61478b33..fca908ff0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,8 @@ ## 2016-XX-XX FreshRSS 1.6.0-dev +* Security + * Prevent `<a target="_blank">` attacks with `window.opener` [#1245](https://github.com/FreshRSS/FreshRSS/issues/1245) * UI * Download icon 💾 for podcasts [#1236](https://github.com/FreshRSS/FreshRSS/issues/1236) |