release 7.2.1

This commit is contained in:
Athou
2026-08-03 09:06:32 +02:00
parent bc6e767953
commit 2e1e5257b4
4 changed files with 9 additions and 4 deletions

View File

@@ -1,5 +1,10 @@
# Changelog
## [7.2.1]
- correctly handle favicons hosted at the root of the domain for feeds with non-default ports
- prevent XXS injections in third party apps. The CommaFeed React client was already stripping malicious "javascript:" URLs, they are now filtered during feed parsing and no longer stored in the database/served through the REST API.
## [7.2.0]
- Add support for icons declared in feeds. This is useful for feeds exposed by RSS bridges (#2048)