diff options
| author | Bernhard Posselt <dev@bernhard-posselt.com> | 2016-05-11 17:12:52 +0200 |
|---|---|---|
| committer | Bernhard Posselt <dev@bernhard-posselt.com> | 2016-05-11 17:12:52 +0200 |
| commit | a557394c5c6ce2c5b433148baac200cbc17f3e64 (patch) | |
| tree | 6ef771e10db0786b533416eb5c6df5a7f0cc28ee /CHANGELOG.md | |
| parent | 351ffd868ad61156bae09a7fde1e802d74128d08 (diff) | |
remove pull to refresh
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index b791675ad..afd7c7760 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,7 @@ +owncloud-news (8.8.0) +* **Enhancement**: Remove current pull to refresh implementation since it is more annoying than helpful. +* **Enhancement**: Add API route for supported API levels + owncloud-news (8.7.5) * **Security (High)**: Fix security bug that would allow websites to access your DOM document when using keyboard shortcuts to open an article in a new tab, downloading audio files, opening links on the explore page or opening links to the ownCloud documentation or issue tracker (News app versions prior to 5.0.0 are also vulnerable when clicking on any link in the title or article body). This gives any attacker access to all data on the DOM and allows them to make arbitrary requests to the ownCloud server on the user's behalf, bypassing CSRF protection and gaining full access to their account by stealing their login cookies. For a more detailed explanation [visit this website](https://medium.com/@jitbit/target-blank-the-most-underestimated-vulnerability-ever-96e328301f4c#.h55ny7ef0) |