* Fix a security hole that allowed insertion of unsafe content via the meta

[ikiwiki.git] / debian / NEWS

diff --git a/debian/NEWS b/debian/NEWS
index 69cbbbd88a61e7ed596b1b5a45b4cfa61b60dae8..9ee20b00accf3295557bd38c5c948b8c16f4cfbf 100644 (file)
--- a/debian/NEWS
+++ b/debian/NEWS
@@ -1,3 +1,13 @@
+ikiwiki (1.47) unstable; urgency=low
+ 
+  Due to a security fix, wikis that have the htmlscrubber enabled can no
+  longer use the meta plugin to insert html link and meta tags.
+
+  Some special case methods have been added for safely including stylesheets,
+  and for doing openid delegation. See the meta plugin docs for details.
+ 
+ -- Joey Hess <joeyh@debian.org>  Wed, 21 Mar 2007 14:18:40 -0400
+
 ikiwiki (1.45) unstable; urgency=low
 
   Wikis need to be rebuilt on upgrade to this version. If you listed your wiki