django-cms / django-filer

File and Image Management Application for django
https://django-filer.readthedocs.io/
Other
1.73k stars 574 forks source link

Feat: add Django 42 Support #1459

Closed joshyu closed 2 months ago

joshyu commented 2 months ago

Description

Some projects need to add Django 4.2 support to v2.2.x. django-filer 2.x is susceptible to SVG XSS attacks and we strongly recommend upgrading it to 3.x.

Checklist

fsbraun commented 2 months ago

LGTM, too. IHMO we should at least add a warning to the README that filer 2.x is susceptible to SVG XSS attacks and that we strongly recommend to upgrade to 3.x.

There should not be any migrations induced, as far as I can see.

joshyu commented 2 months ago

LGTM, too. IHMO we should at least add a warning to the README that filer 2.x is susceptible to SVG XSS attacks and that we strongly recommend to upgrade to 3.x.

There should not be any migrations induced, as far as I can see.

@fsbraun , I will update the readme.md to add the warning message. the migration file is to fix the test error.

joshyu commented 2 months ago

@marksweb / @fsbraun ,

Can you review and merge it if it's fine? Cheers.