Fixed path traversal vulnerability by validating `pageKey` in the API files endpoint (Reported by Sehwang Kim - AhnLab, Inc.)
Notable features
Quick menu for moving between page types
Full changelog
What's Changed
Fix: improvements for Dutch by @ltguillaume in https://github.com/bludit/bludit/pull/1682
Fix: thumbnails for webp images by @dignajar in https://github.com/bludit/bludit/pull/1683
Fix typo by @Grandroot in https://github.com/bludit/bludit/pull/1684
Fix: validate pageKey in API files endpoint to prevent path traversal (Reported by Sehwang Kim - AhnLab, Inc.) by @dignajar in https://github.com/bludit/bludit/pull/1687
Fix: preview issue #1692 by @dignajar in https://github.com/bludit/bludit/pull/1693
Fix: media manager wrong extensions and ghost thumbnails on delete (#1694) by @dignajar in https://github.com/bludit/bludit/pull/1695
Chore: fix get user ip by @dignajar in https://github.com/bludit/bludit/pull/1686
Chore: refactor dashboard ui and plugin simple stats by @dignajar in https://github.com/bludit/bludit/pull/1689
Chore: Ensure that the search term and search URL are html escaped by @bramley in https://github.com/bludit/bludit/pull/1691
Chore: improve dashboard ui by @dignajar in https://github.com/bludit/bludit/pull/1697
Chore: notes to readme running behind proxy by @dignajar in https://github.com/bludit/bludit/pull/1698
Chore: bump version to 3.21.0 by @dignajar in https://github.com/bludit/bludit/pull/1700
Feat: move between page types quick menu by @dignajar in https://github.com/bludit/bludit/pull/1696
New Contributors
@Grandroot made their first contribution in https://github.com/bludit/bludit/pull/1684
Fix authenticated RCE via file upload and .htaccess bypass
Notable features
Add editorToolbar hook for plugins to inject custom toolbar buttons
Full changelog
What's Changed
Fix image description loss in TinyMCE editor by @dignajar in https://github.com/bludit/bludit/pull/1673
feat: Add editorToolbar hook for plugins to inject editor toolbar buttons by @dignajar in https://github.com/bludit/bludit/pull/1675
Fix authenticated RCE via file upload and .htaccess bypass by @dignajar in https://github.com/bludit/bludit/pull/1674
chores: multiples fixes and improvements in parsedown and images helper by @dignajar in https://github.com/bludit/bludit/pull/1677
fix: security hardening and user profile field corrections by @dignajar in https://github.com/bludit/bludit/pull/1679
chore: update languages dictionaries, update dashboard colors, fix an issue with plugin sorting by @dignajar in https://github.com/bludit/bludit/pull/1680
