Wagtail

Latest version: v6.1

Safety actively analyzes 628478 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 16 of 30

2.8.2

Not secure
~~~~~~~~~~~~~~~~~~

* Fix: CVE-2020-11037 - avoid potential timing attack on password-protected private pages (Thibaud Colas)

2.8.1

Not secure
~~~~~~~~~~~~~~~~~~

* Fix: CVE-2020-11001 - prevent XSS attack via page revision comparison view (Vlad Gerasimenko, Matt Westcott)

2.8

Not secure
~~~~~~~~~~~~~~~~

* Django 3.0 support (Matt Westcott, Mads Jensen)
* Improved page locking to give editors exclusive edit access (Karl Hobley, Jacob Topp-Mugglestone)
* Removed support for Django 2.0
* Removed leftover Python 2.x compatibility code (Sergey Fedoseev)
* Combine flake8 configurations (Sergey Fedoseev)
* Improve diffing behavior for text fields (Aliosha Padovani)
* Improve contrast of disabled inputs (Nick Smith)
* Added `get_document_model_string` function (Andrey Smirnov)
* Added support for Cloudflare API tokens for frontend cache invalidation (Tom Usher)
* Cloudflare frontend cache invalidation requests are now sent in chunks of 30 to fit within API limits (Tom Usher)
* Added `ancestors` field to the pages endpoint in admin API (Karl Hobley)
* Removed Django admin management of `Page` & `Site` models (Andreas Bernacca)
* Cleaned up Django docs URLs in documentation (Pete Andrew)
* Add StreamFieldPanel to available panel types in documentation (Dan Swain)
* Add `{{ block.super }}` example to ModelAdmin customization in documentation (Dan Swain)
* Add ability to filter image index by a tag (Benedikt Willi)
* Add partial experimental support for nested InlinePanels (Matt Westcott, Sam Costigan, Andy Chosak, Scott Cranfill)
* Added cache control headers when serving documents (Johannes Vogel)
* Use `sensitive_post_parameters` on password reset form (Dan Braghis)
* Add `WAGTAILEMBEDS_RESPONSIVE_HTML` setting to remove automatic addition of `responsive-object` around embeds (Kalob Taulien)
* Fix: Rename documents listing column 'uploaded' to 'created' (LB (Ben Johnston))
* Fix: Unbundle the l18n library as it was bundled to avoid installation errors which have been resolved (Matt Westcott)
* Fix: Prevent error when comparing pages that reference a model with a custom primary key (Fidel Ramos)
* Fix: Moved `get_document_model` location so it can be imported when Models are not yet loaded (Andrey Smirnov)
* Fix: Use correct HTML escaping of Jinja2 form templates for StructBlocks (Brady Moe)
* Fix: All templates with wagtailsettings and modeladmin now use `block.super` for `extra_js` & `extra_css` (Timothy Bautista)
* Fix: Layout issue when using `FieldRowPanel` with a heading (Andreas Bernacca)
* Fix: `file_size` and `file_hash` now updated when Document file changed (Andreas Bernacca)
* Fix: Fixed order of URLs in project template so that static / media URLs are not blocked (Nick Smith)
* Fix: Added `verbose_name_plural` to form submission model (Janneke Janssen)
* Fix: Prevent `update_index` failures and incorrect front-end rendering on blank `TableBlock` (Carlo Ascani)
* Fix: Dropdown initialization on the search page after AJAX call (Eric Sherman)
* Fix: Make sure all modal chooser search results correspond to the latest search by canceling previous requests (Esper Kuijs)

2.7.4

Not secure
~~~~~~~~~~~~~~~~~~

* Fix: CVE-2020-15118 - prevent HTML injection through form field help text (Timothy Bautista, Matt Westcott)
* Fix: Expand Pillow dependency range to include 7.x (Harris Lapiroff, Matt Westcott)

2.7.3

Not secure
~~~~~~~~~~~~~~~~~~

* Fix: CVE-2020-11037 - avoid potential timing attack on password-protected private pages (Thibaud Colas)

2.7.2

Not secure
~~~~~~~~~~~~~~~~~~

* Fix: CVE-2020-11001 - prevent XSS attack via page revision comparison view (Vlad Gerasimenko, Matt Westcott)

Page 16 of 30

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.