From 901f4f566983ab7911c1d81a34408191c580b060 Mon Sep 17 00:00:00 2001
From: Michele Tessaro <michele@michele.tessaro@email.it>
Date: Sat, 18 Jun 2022 10:01:23 +0200
Subject: [PATCH 1/3] fix: usr: fixed possible XSS (fixes #111, thanks to
 Liaham)

---
 app/views/redmine_drawio/_macro_dialog.html.erb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/views/redmine_drawio/_macro_dialog.html.erb b/app/views/redmine_drawio/_macro_dialog.html.erb
index 0396e4c0..fbf369f4 100644
--- a/app/views/redmine_drawio/_macro_dialog.html.erb
+++ b/app/views/redmine_drawio/_macro_dialog.html.erb
@@ -1,5 +1,6 @@
 <div id="dlg_redmine_drawio" title="<%= l(:drawio_dlg_title) %>" style="display:none">
   <form id="drawio_form">
+    <%= hidden_field_tag :authenticity_token, form_authenticity_token %>
     <fieldset>
       <div class="tabular">
         <p>

From 7be8f10c6f38900b97f6e3a66fd77e592672c1ce Mon Sep 17 00:00:00 2001
From: Michele Tessaro <michele@michele.tessaro@email.it>
Date: Sat, 18 Jun 2022 10:06:50 +0200
Subject: [PATCH 2/3] new: usr: added more german translations (refs #111,
 thanks to Liaham)

---
 config/locales/de.yml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/config/locales/de.yml b/config/locales/de.yml
index 9ada97cb..c737014e 100644
--- a/config/locales/de.yml
+++ b/config/locales/de.yml
@@ -2,8 +2,8 @@
 de:
   drawio_url: "Draw.io Dienst URL"
   drawio_service_url_hint: "URL deiner lokalen Installation; Setze 'https://embed.diagrams.net' um den Web-Dienst zu nutzen."
-  drawio_svg_enabled: "Enable SVG diagrams"
-  drawio_svg_enabled_hint: "WARNING: embedded SVG diagrams can lead to XSS(Cross Site Scripting) security issues"
+  drawio_svg_enabled: "Aktiviere SVG Diagramme"
+  drawio_svg_enabled_hint: "WARUNUNG: Eingebettete SVG Diagramme ermöglichen XSS(Cross Site Scripting) Angriffe"
   drawio_mathjax: "SVG mathemathics Unterstützung"
   drawio_mathjax_hint: "Aktiviere mathematische Symbolunterstützung für SVG Diagramme"
   drawio_mathjax_url: "MathJax Bibliothek URL"
@@ -12,10 +12,10 @@ de:
   drawio_dlg_diagName: "Diagramm Name"
   drawio_dlg_diagType: "Diagramm Format"
   drawio_dlg_size: "Breite"
-  drawio_dlg_toolbar_autohide: "Hide toolbar"
-  drawio_dlg_lightbox: "Use LightBox"
-  drawio_dlg_layers: "Inizial layers"
-  drawio_dlg_page: "Initial page"
-  drawio_dlg_hiligh: "Hyperlinks color"
-  drawio_dlg_zoom: "Zoom controls"
+  drawio_dlg_toolbar_autohide: "Toolbar ausblenden"
+  drawio_dlg_lightbox: "LightBox verwenden"
+  drawio_dlg_layers: "Erste Ebene"
+  drawio_dlg_page: "Erste Seite"
+  drawio_dlg_hiligh: "Hyperlink Farbe"
+  drawio_dlg_zoom: "Zoom aktivieren"
   drawio_warning_api_needs_to_be_enabled: Um drawio Diagramme speichern zu können, muss die REST API unter Administration -> Konfiguration -> API aktiviert werden.

From 9946ec5b09e6bb79945824fa22252b4b6aa73352 Mon Sep 17 00:00:00 2001
From: Michele Tessaro <michele@michele.tessaro@email.it>
Date: Sat, 18 Jun 2022 10:29:02 +0200
Subject: [PATCH 3/3] chg: pkg: version bump to v1.4.1

---
 CHANGELOG.md | 15 +++++++++++++++
 init.rb      |  2 +-
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5e7a8ebe..bc85f631 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,12 +1,27 @@
 # Changelog
 
 
+## v1.4.1 (2022-06-18)
+
+### New
+
+* Added more german translations (refs #111, thanks to Liaham) [Michele Tessaro]
+
+### Fix
+
+* Fixed possible XSS (fixes #111, thanks to Liaham) [Michele Tessaro]
+
+
 ## v1.4.0 (2022-05-20)
 
 ### New
 
 * Support Redmine 5.0 (refs #110) [sk-ys]
 
+### Changes
+
+* Updated documentation for the new release. [Michele Tessaro]
+
 
 ## v1.3.1 (2022-05-14)
 
diff --git a/init.rb b/init.rb
index 01f1d54e..b6afa8f6 100644
--- a/init.rb
+++ b/init.rb
@@ -4,7 +4,7 @@
   name 'Redmine Drawio plugin'
   author 'Michele Tessaro'
   description 'Wiki macro plugin for inserting drawio diagrams into Wiki pages and Issues'
-  version '1.4.0'
+  version '1.4.1'
   url 'https://github.com/mikitex70/redmine_drawio'
   author_url 'https://github.com/mikitex70'