Add security notice

This commit is contained in:
J. Ryan Stinnett 2020-08-05 16:52:16 +01:00
parent 04afd0232b
commit b199f55d1c

View File

@ -1,5 +1,19 @@
Changes in [1.7.3](https://github.com/vector-im/element-web/releases/tag/v1.7.3) (2020-08-05) Changes in [1.7.3](https://github.com/vector-im/element-web/releases/tag/v1.7.3) (2020-08-05)
============================================================================================= =============================================================================================
## Security notice
Element Web 1.7.3 (as well as the earlier release 1.7.2) fixes an issue where
replying to a specially formatted message would make it seem like the replier
said something they did not. Thanks to Sorunome for responsibly disclosing this
via Matrix's Security Disclosure Policy.
Element Web 1.7.3 (as well as the earlier release 1.7.2) fixes an issue where an
unexpected language ID in a code block could cause Element to crash. Thanks to
SakiiR for responsibly disclosing this via Matrix's Security Disclosure Policy.
## All changes
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.3-rc.1...v1.7.3) [Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.3-rc.1...v1.7.3)
* Upgrade to React SDK 3.1.0 and JS SDK 8.0.1 * Upgrade to React SDK 3.1.0 and JS SDK 8.0.1