github danielbrendel/hortusfox-web v6.0

5 hours ago

HortusFox version 6.0 Security Release

This release is considerably small, but fixes an XSS issue for plant notes. This vulnerability allowed users to embed JavaScript code which would be executed by anyone viewing a given plant details page. The impact is considerably low, but there is a saying "better safe than sorry", hence I provided a patch.

Also issue #530 has been resolved, so all notes fields (plant details, locations, profile page) do now support markdown.

Happy plant parenting!

Don't miss a new hortusfox-web release

NewReleases is sending notifications on new releases.