* Allow simple alphanumeric style attribute values in the htmlscrubber. This

[ikiwiki.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 7c1625a415b9adfb2baa16a5f0ca55714d5bf652..e1bcc3185b58a5c480a38f2d895a0992fb273c36 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -7,8 +7,10 @@ ikiwiki (2.4) UNRELEASED; urgency=low
   * Support building on systems that lack asprintf.
   * mercurial getctime is currently broken, apparently by some change in
     mercurial version 0.9.4. Turn the failing test case into a TODO test case.
+  * Allow simple alphanumeric style attribute values in the htmlscrubber. This
+    should be safe from javascript attacks.
 
- -- Joey Hess <joeyh@debian.org>  Sun, 08 Jul 2007 20:25:00 -0400
+ -- Joey Hess <joeyh@debian.org>  Wed, 11 Jul 2007 12:23:41 -0400
 
 ikiwiki (2.3) unstable; urgency=low