Releases: parse-community/parse-server
Releases · parse-community/parse-server
6.1.0-alpha.20
6.1.0-alpha.20 (2023-06-09)
Features
6.1.0-alpha.19
6.1.0-alpha.19 (2023-06-08)
Bug Fixes
6.1.0-alpha.18
6.1.0-alpha.18 (2023-06-08)
Features
6.1.0-alpha.17
6.1.0-alpha.17 (2023-06-07)
Features
6.1.0-alpha.16
6.1.0-alpha.15
6.1.0-alpha.15 (2023-05-28)
Bug Fixes
6.1.0-alpha.14
6.1.0-alpha.13
6.1.0-alpha.13 (2023-05-25)
Bug Fixes
5.5.1
6.2.0
6.2.0 (2023-05-20)
Features
- Add new Parse Server option
fileUpload.fileExtensions
to restrict file upload by file extension; this fixes a security vulnerability in which a phishing attack could be performed using an uploaded HTML file; by default the new option only allows file extensions matching the regex pattern^[^hH][^tT][^mM][^lL]?$
, which excludes HTML files; if your app currently depends on uploading files with HTML file extensions then this may be a breaking change and you could allow HTML file upload by setting the option to['.*']
(#8538) (a318e7b)