Security Fixes
- Reject attachment uploads that resolve into .git (08046c1).
Thanks to @mega-wave-inc for reaching out and reporting this issue. - Require a confirmed email for git http access (99c8ee9).
Thanks to @mega-wave-inc for reaching out and reporting this issue. - Reject nested .git path components (0086b3b).
Plugins
- Add navbar and admin menu plugin hooks (e9d077f).
- Add template_folders plugin hook (4dbc987).
- Add the
userinfoexample plugin in docs/plugin_examples/plugin_userinfo, it shows the logged-in user in the navbar, see #574 (5e94ce6, 7ba386c).
Bug Fixes
- Encode filename in inline attachment links (36569f6).