mirror of
https://gh.wpcy.net/https://github.com/buddypress/buddypress.git
synced 2026-05-31 05:04:29 +08:00
The goal of this area is: - to introduce the User, Contributor and Developer Handbooks - share common ressources such as: Releases history (changelog, license, etiquette, official logos, etc..) This commit also transforms the `releases` handbook as a chapter of this generic area (Releases history). Closes https://github.com/buddypress/buddypress/pull/262 git-svn-id: https://buddypress.svn.wordpress.org/trunk@13786 cdf35c40-ae34-48e0-9cc9-0c9da1808c22
2.3 KiB
2.3 KiB
Branch 9.0 ChangeLog
All notable changes about branch 9.0 of BuddyPress are documented in this file.
_bp_db_version: 12850.
Version 9.2.0 - 2022-01-03
Trac revision: 13207. Full changes list.
Fixes
- xProfile component: drop an extra double quote inside the #tabs-signup-group tag (see #8586)
- xProfile: prevent the Name field to override WP Field Types on signup (see #8568)
- Core component: validate an url param exists before processing an oEmbed XML request (see #8601)
- Activity component: Improve the Core Search routing function to support Activity search (see #8608)
- BP Blocks: make sure front-end JS for dynamic blocks are not loaded in WP Admin (see #8610)
Version 9.1.1 - 2021-08-18
Trac revision: 13068 Full changes list.
Fixes
- Activity: update the nonce used by the Activity Reply JS Fallback (#8545).
- Settings: do not try to validate a dismissed email change (#8538).
- Settings: make sure changing pwd from the General Screen encrypts it (#8539).
Security
- Make sure the activation key is never included into responses of the BP REST API Signup endpoints.
- Prevent potential SQL injections making sure the order by clause built inside the
BP_Notifications_Notification::get_order_by_sql()only accepts an allowed list of column names. - Prevent potential SQL injections making sure the order by clause built inside the
BP_Invitation::get_order_by_sql()only accepts an allowed list of column names.
Version 9.0.0 "Mico" - 2021-07-19
Trac revision: 13027. Full changes list.