1. 10 Sep, 2015 2 commits
  2. 09 Sep, 2015 3 commits
  3. 01 Sep, 2015 4 commits
  4. 27 Aug, 2015 4 commits
  5. 24 Aug, 2015 1 commit
  6. 21 Aug, 2015 1 commit
  7. 20 Aug, 2015 5 commits
  8. 31 Jul, 2015 1 commit
  9. 26 Jun, 2015 1 commit
  10. 19 Jun, 2015 1 commit
  11. 18 Jun, 2015 1 commit
  12. 17 Jun, 2015 2 commits
  13. 05 Jun, 2015 3 commits
    • Release v4.3.0 :tada: · ecdd5427
      For the full details of what is included in this release, check out NEWS.
      
      [fixes #1875]
      maclover7 committed
    • Fix a possible security issue with spoofing · 9aee4112
      Thanks to MORI Shingo of DeNA Co., Ltd. for reporting this.
      
      There is an issue where if an HTML file is uploaded with a .html
      extension, but the content type is listed as being `image/jpeg`, this
      will bypass a validation checking for images. But it will also pass the
      spoof check, because a file named .html and containing actual HTML
      passes the spoof check.
      
      This change makes it so that we also check the supplied content type. So
      even if the file contains HTML and ends with .html, it doesn't match the
      content type of `image/jpeg` and so it fails.
      Jon Yurek committed
  14. 27 May, 2015 1 commit
  15. 15 May, 2015 6 commits
  16. 26 Apr, 2015 2 commits
  17. 24 Apr, 2015 2 commits