From: Joey Hess <joey@kodama.kitenet.net>
Date: Sun, 10 Feb 2008 23:58:41 +0000 (-0500)
Subject: add news item for ikiwiki 2.32.3
X-Git-Tag: 2.40~114
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=886adf9f9fea74560202fafcb4742ce26cd76416;p=ikiwiki.git

add news item for ikiwiki 2.32.3
---

diff --git a/doc/news/version_2.32.3.mdwn b/doc/news/version_2.32.3.mdwn
new file mode 100644
index 000000000..3d0177a52
--- /dev/null
+++ b/doc/news/version_2.32.3.mdwn
@@ -0,0 +1,18 @@
+ikiwiki 2.32.3 released with [[toggle text="these changes"]]
+[[toggleable text="""
+ * [ Josh Triplett ]
+   * Do not allow the about: URI scheme; some browsers interpret about:
+     URIs like a limited version of data: URIs.  In particular, some
+     versions of Internet Explorer interpret arbitrary HTML content in
+     about: URIs.
+   * Also filter the attributes cite, longdesc, and usemap, which can contain
+     URIs.
+ * [ Joey Hess ]
+   * meta: Check that the urls provided for authorurl, permalink, and openid
+     are safe and can't contain javascript.
+ * [ Josh Triplett ]
+   * Match literal '.' in URI schemas containing '.', rather than matching any
+     character.
+   * Do not allow the steam: URI scheme.
+   * Allow the snews: URI scheme.
+   * Allow the smb: URI scheme."""]]
\ No newline at end of file