From: Alex Gleason Date: Fri, 2 Apr 2021 17:18:35 +0000 (-0500) Subject: CHANGELOG: SimplePolicy embedded objects are now checked X-Git-Url: https://git.squeep.com/?a=commitdiff_plain;h=20878c7f9913e1501821356f24e97c2c42b00a41;p=akkoma CHANGELOG: SimplePolicy embedded objects are now checked --- diff --git a/CHANGELOG.md b/CHANGELOG.md index 9a0171763..150cd4147 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -25,6 +25,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). - Applying ConcurrentLimiter settings via AdminAPI - User login failures if their `notification_settings` were in a NULL state. - Mix task `pleroma.user delete_activities` query transaction timeout is now :infinity +- MRF (`SimplePolicy`): Embedded objects are now checked. If any embedded object would be rejected, its parent is rejected. This fixes Announces leaking posts from blocked domains. ## [2.3.0] - 2020-03-01