Skip to content

Commit

Permalink
Add changelog
Browse files Browse the repository at this point in the history
  • Loading branch information
kasparsd committed Mar 8, 2022
1 parent cf8dc53 commit 209cbbc
Showing 1 changed file with 7 additions and 2 deletions.
9 changes: 7 additions & 2 deletions readme.txt
Original file line number Diff line number Diff line change
Expand Up @@ -91,13 +91,18 @@ Past Contributors: fjarrett, shadyvb, chacha, westonruter, johnregan3, jacobschw

== Upgrade Notice ==

= 3.8.2 =
= 3.9.0 =

Fixes a security vulnerability in the way the `order` query parameter was passed to the database query for authenticated users when viewing the Stream records page in the WordPress admin.
Track changes to posts when using the block editor.


== Changelog ==

= 3.9.0 - March 8, 2022 =

- Fix: Track changes to posts when using the block editor by making the Posts connector to run on both frontend and backend requests since block editor changes happen over the REST API [#1264](https://github.com/xwp/stream/pull/1264), props [@coreymckrill](https://github.com/coreymckrill).
- Development: Adjust the local development environment to use MariaDB containers for ARM processor compatabilty.

= 3.8.2 - October 12, 2021 =

- Security fix: Ensure the value of `order` query parameter forwarded to the database query when viewing the Stream records in the WordPress admin (for authenticated users) is only `ASC` or `DESC`. Previously it passed the whole value of the `order` parameter filtered through `esc_sql()`.
Expand Down

0 comments on commit 209cbbc

Please sign in to comment.