Merge branch 'release/v1.4.1'

CHANGELOG.md

@@ -1,12 +1,27 @@
 # Changelog
 
 
+## v1.4.1 (2022-06-18)
+
+### New
+
+* Added more german translations (refs #111, thanks to Liaham) [Michele Tessaro]
+
+### Fix
+
+* Fixed possible XSS (fixes #111, thanks to Liaham) [Michele Tessaro]
+
+
 ## v1.4.0 (2022-05-20)
 
 ### New
 
 * Support Redmine 5.0 (refs #110) [sk-ys]
 
+### Changes
+
+* Updated documentation for the new release. [Michele Tessaro]
+
 
 ## v1.3.1 (2022-05-14)
 

app/views/redmine_drawio/_macro_dialog.html.erb

@@ -1,5 +1,6 @@
 <div id="dlg_redmine_drawio" title="<%= l(:drawio_dlg_title) %>" style="display:none">
   <form id="drawio_form">
+    <%= hidden_field_tag :authenticity_token, form_authenticity_token %>
     <fieldset>
       <div class="tabular">
         <p>

config/locales/de.yml

@@ -2,8 +2,8 @@
 de:
   drawio_url: "Draw.io Dienst URL"
   drawio_service_url_hint: "URL deiner lokalen Installation; Setze 'https://embed.diagrams.net' um den Web-Dienst zu nutzen."
-  drawio_svg_enabled: "Enable SVG diagrams"
-  drawio_svg_enabled_hint: "WARNING: embedded SVG diagrams can lead to XSS(Cross Site Scripting) security issues"
+  drawio_svg_enabled: "Aktiviere SVG Diagramme"
+  drawio_svg_enabled_hint: "WARUNUNG: Eingebettete SVG Diagramme ermöglichen XSS(Cross Site Scripting) Angriffe"
   drawio_mathjax: "SVG mathemathics Unterstützung"
   drawio_mathjax_hint: "Aktiviere mathematische Symbolunterstützung für SVG Diagramme"
   drawio_mathjax_url: "MathJax Bibliothek URL"
@@ -12,10 +12,10 @@ de:
   drawio_dlg_diagName: "Diagramm Name"
   drawio_dlg_diagType: "Diagramm Format"
   drawio_dlg_size: "Breite"
-  drawio_dlg_toolbar_autohide: "Hide toolbar"
-  drawio_dlg_lightbox: "Use LightBox"
-  drawio_dlg_layers: "Inizial layers"
-  drawio_dlg_page: "Initial page"
-  drawio_dlg_hiligh: "Hyperlinks color"
-  drawio_dlg_zoom: "Zoom controls"
+  drawio_dlg_toolbar_autohide: "Toolbar ausblenden"
+  drawio_dlg_lightbox: "LightBox verwenden"
+  drawio_dlg_layers: "Erste Ebene"
+  drawio_dlg_page: "Erste Seite"
+  drawio_dlg_hiligh: "Hyperlink Farbe"
+  drawio_dlg_zoom: "Zoom aktivieren"
   drawio_warning_api_needs_to_be_enabled: Um drawio Diagramme speichern zu können, muss die REST API unter Administration -> Konfiguration -> API aktiviert werden.

init.rb

@@ -4,7 +4,7 @@
   name 'Redmine Drawio plugin'
   author 'Michele Tessaro'
   description 'Wiki macro plugin for inserting drawio diagrams into Wiki pages and Issues'
-  version '1.4.0'
+  version '1.4.1'
   url 'https://github.com/mikitex70/redmine_drawio'
   author_url 'https://github.com/mikitex70'