From 902f0c3bf7f3473189244adc68ec453d0cb73f2c Mon Sep 17 00:00:00 2001 From: Joplin Bot Date: Sun, 28 May 2023 00:43:11 +0000 Subject: [PATCH] Doc: Auto-update documentation Auto-updated using release-website.sh --- readme/changelog.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/readme/changelog.md b/readme/changelog.md index caeaf529a..76ea2a552 100644 --- a/readme/changelog.md +++ b/readme/changelog.md @@ -1,5 +1,12 @@ # Joplin changelog +## [v2.11.5](https://github.com/laurent22/joplin/releases/tag/v2.11.5) (Pre-release) - 2023-05-28T00:41:40Z + +- Improved: Updated packages jsdom (v21.1.2), markdown-it-multimd-table (v4.2.2), react-select (v5.7.3), sass (v1.62.1), sharp (v0.32.1), tar (v6.1.14), yargs (v17.7.2) +- Fixed: Fix slow startup time ([#8087](https://github.com/laurent22/joplin/issues/8087)) +- Security: Disable SVG tag support in editor to prevent XSS ([caf6606](https://github.com/laurent22/joplin/commit/caf6606)) (Vulnerability discovered by [RyotaK](https://ryotak.net/)) +- Security: Prevent XSS by sanitizing certain HTML attributes ([9e90d90](https://github.com/laurent22/joplin/commit/9e90d90)) (Vulnerability discovered by [RyotaK](https://ryotak.net/)) + ## [v2.10.19](https://github.com/laurent22/joplin/releases/tag/v2.10.19) - 2023-05-17T12:25:41Z - Improved: Improved handling of items with duplicate IDs when synchronising with Joplin Cloud or Server ([d4c43a8](https://github.com/laurent22/joplin/commit/d4c43a8))