Skip to content

Commit

Permalink
Merge pull request #324 from alphagov/release-3.3.1
Browse files Browse the repository at this point in the history
Release v3.3.1
  • Loading branch information
lfdebrux authored Apr 11, 2023
2 parents a51c705 + a93cca2 commit f670bf5
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 1 deletion.
2 changes: 2 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,8 @@

## Unreleased

## 3.3.1

This change solves a potential security issue with HTML snippets. Pages indexed in search results have their entire contents indexed, including any HTML code snippets. These HTML snippets would appear in the search results unsanitised, making it possible to render arbitrary HTML or run arbitrary scripts.

You can see more detail about this issue at [#323: Fix XSS vulnerability on search results page](https://github.com/alphagov/tech-docs-gem/pull/323)
Expand Down
2 changes: 1 addition & 1 deletion lib/govuk_tech_docs/version.rb
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
module GovukTechDocs
VERSION = "3.3.0".freeze
VERSION = "3.3.1".freeze
end

0 comments on commit f670bf5

Please sign in to comment.