Closed joshyu closed 7 months ago
LGTM, too. IHMO we should at least add a warning to the README that filer 2.x is susceptible to SVG XSS attacks and that we strongly recommend to upgrade to 3.x.
There should not be any migrations induced, as far as I can see.
LGTM, too. IHMO we should at least add a warning to the README that filer 2.x is susceptible to SVG XSS attacks and that we strongly recommend to upgrade to 3.x.
There should not be any migrations induced, as far as I can see.
@fsbraun , I will update the readme.md to add the warning message. the migration file is to fix the test error.
@marksweb / @fsbraun ,
Can you review and merge it if it's fine? Cheers.
Description
Some projects need to add Django 4.2 support to v2.2.x. django-filer 2.x is susceptible to SVG XSS attacks and we strongly recommend upgrading it to 3.x.
Checklist
release/2.2.x