Blog Post

Release Notes
1 MIN READ

Classic Communities 24.07 Release Notes

AshaC's avatar
AshaC
Khoros Staff
4 months ago

You found it. We fixed it.

  • Previously, when external email addresses were added as recipients in the moderation tool, they did not receive email notifications. This issue has been resolved. External users now receive email notifications as expected when they are set as recipients for moderation emails.

  • We resolved an issue where the page reloaded to the top instead of staying at the last sent message every time a private message was sent. 

  • We resolved an issue where the UserContributedArticlesPage returned an exception instead of showing the list of contributions made by the member. 

  • We resolved an issue where script tags in API POST requests were not being sanitized and were executing. Now, script tags are properly sanitized to prevent execution. 
Published 4 months ago
Version 1.0
  • You are correct BrentPatching. Previously it was possible for a user with full HTML permission to execute script tags using the API, but now it will throw an error as it does for other restricted tags.


  • AshaC wrote:

     

    • We resolved an issue where script tags in API POST requests were not being sanitized and were executing. Now, script tags are properly sanitized to prevent execution. 

    For the ignorant - what is a script tag? Does this mean people could previously use API POST requests to execute JavaScript, but now are properly 'sanitized' so they don't execute?