v5.28.5 Redirect Sanitization Fix

SabreCat released this 11 Sep 19:45

· 50 commits to develop since this release

Client

Fix: Replace misused DOMPurify regex with a bespoke sanitization function for redirectTo parameters, allowing only TRUSTED_DOMAINS links and same domain redirects (@SabreCat with assistance from @Kwstubbs)

API

Chore: Locale files updated (@weblate)

Contributors

weblate, SabreCat, and Kwstubbs

Assets 2