emdash-cms/emdash emdash@0.28.1

on GitHub

Patch Changes

• #1850 b92807f Thanks @khoinguyenpham04! - Fixes internal media usage repair so partial draft failures, concurrent content deletes, and fresher usage writes keep repair coverage non-complete without discarding valid indexed usage.

• #1863 9e4701e Thanks @swissky! - Fixes a privilege escalation on private plugin API routes: an editor (or a cross-origin page) could invoke admin-only, state-changing plugin routes by sending them as GET or HEAD instead of POST, which bypassed the permission tier and CSRF check. Every private plugin route now requires plugins:manage and the CSRF header regardless of HTTP method.

• Updated dependencies []:

  • @emdash-cms/admin@0.28.1
  • @emdash-cms/auth@0.28.1
  • @emdash-cms/gutenberg-to-portable-text@0.28.1