Release notes freestyler v7.221225
This release contains a small but important adjustments on the responder (upload)module and added some extra (security)checks on the incoming form-posts.
Release summary
Responder change(s):
- Adjusted htmlUpload form and submitUpload agent to proper deposit (cgi)data in mailroom with a maximum of reader rights assigned to the freestyler .nsf (acl)
- Adjusted js call buildMrdump(). It now encodes & to %26 in fieldvalues of condional forms to avoid values being cut off.
Mailroom extra xss fixes:
- Added extra (injection)checks on cgi and subject values in incoming mailroom posts.