X-Git-Url: http://git.squeep.com/?a=blobdiff_plain;f=CHANGELOG.md;h=feac7b1c30e30a959f8da5de922a969f72115ea5;hb=da1ee5c46ac4296232ac5cd43f4357136608af48;hp=eacba02085fd12c17c3aa06ba4b144b7ca966a3d;hpb=cd4352a86fe37983cbc617c42f3f6c8a631fb9b3;p=akkoma

diff --git a/CHANGELOG.md b/CHANGELOG.md
index eacba0208..feac7b1c3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -33,6 +33,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Applying ConcurrentLimiter settings via AdminAPI
 - User login failures if their `notification_settings` were in a NULL state.
 - Mix task `pleroma.user delete_activities` query transaction timeout is now :infinity
+- MRF (`SimplePolicy`): Embedded objects are now checked. If any embedded object would be rejected, its parent is rejected. This fixes Announces leaking posts from blocked domains.
 - Fixed some Markdown issues, including trailing slash in links.
 
 ## [2.3.0] - 2020-03-01