From 7ef6c582816cb349f240054064d495753a916408 Mon Sep 17 00:00:00 2001 From: Mark Sapiro Date: Mon, 25 Apr 2011 16:26:13 -0700 Subject: Strengthened escaping of user web data by including some characters that some older browsers misinterpret as < or >. --- NEWS | 3 +++ 1 file changed, 3 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 394d596a..8ee35b09 100644 --- a/NEWS +++ b/NEWS @@ -43,6 +43,9 @@ Here is a history of user visible changes to Mailman. Bug Fixes and other patches + - Strengthened escaping of user web data by including some characters that + some older browsers misinterpret as < or >. + - Mailman now sets the 'secure' flag in cookies set via https URLs. Bug #770377. -- cgit v1.2.3