CHANGELOG: SimplePolicy embedded objects are now checked

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9a0171763e859f94fe700e1b8925715c87bcec62..150cd4147e542631918fc30f59f6b0ce545764a1 100644 (file)
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -25,6 +25,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Applying ConcurrentLimiter settings via AdminAPI
 - User login failures if their `notification_settings` were in a NULL state.
 - Mix task `pleroma.user delete_activities` query transaction timeout is now :infinity
+- MRF (`SimplePolicy`): Embedded objects are now checked. If any embedded object would be rejected, its parent is rejected. This fixes Announces leaking posts from blocked domains.
 
 ## [2.3.0] - 2020-03-01