This repository was archived by the owner on Sep 11, 2024. It is now read-only.
File tree Expand file tree Collapse file tree 1 file changed +24
-0
lines changed Expand file tree Collapse file tree 1 file changed +24
-0
lines changed Original file line number Diff line number Diff line change
1
+ Changes in [3.21.0](https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.21.0) (2021-05-17)
2
+ =====================================================================================================
3
+ [Full Changelog](https://github.com/matrix-org/matrix-react-sdk/compare/v3.21.0-rc.1...v3.21.0)
4
+
5
+ ## Security notice
6
+
7
+ matrix-react-sdk 3.21.0 fixes a low severity issue (GHSA-8796-gc9j-63rv)
8
+ related to file upload. When uploading a file, the local file preview can lead
9
+ to execution of scripts embedded in the uploaded file, but only after several
10
+ user interactions to open the preview in a separate tab. This only impacts the
11
+ local user while in the process of uploading. It cannot be exploited remotely
12
+ or by other users. Thanks to [Muhammad Zaid Ghifari](https://github.com/MR-ZHEEV)
13
+ for responsibly disclosing this via Matrix's Security Disclosure Policy.
14
+
15
+ ## All changes
16
+
17
+ * Upgrade to JS SDK 11.0.0
18
+ * [Release] Add missing space on beta feedback dialog
19
+ [\#6019](https://github.com/matrix-org/matrix-react-sdk/pull/6019)
20
+ * [Release] Add feedback mechanism for beta features, namely Spaces
21
+ [\#6013](https://github.com/matrix-org/matrix-react-sdk/pull/6013)
22
+ * Add feedback mechanism for beta features, namely Spaces
23
+ [\#6012](https://github.com/matrix-org/matrix-react-sdk/pull/6012)
24
+
1
25
Changes in [3.21.0-rc.1](https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.21.0-rc.1) (2021-05-11)
2
26
===============================================================================================================
3
27
[Full Changelog](https://github.com/matrix-org/matrix-react-sdk/compare/v3.20.0...v3.21.0-rc.1)
You can’t perform that action at this time.
0 commit comments