From 3148d406a061cb3db351cd10904513c5301de5e8 Mon Sep 17 00:00:00 2001 From: Simon Wisselink Date: Wed, 17 Feb 2021 22:57:33 +0100 Subject: [PATCH] changelog --- CHANGELOG.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1caacb30a..e05d636f6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,8 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] ### Security -- Prevent access to `$smarty.template_object` in Security mode -- Code injection vulnerability by using illegal function names in `{function name='blah'}{/function}` +- Prevent access to `$smarty.template_object` in sandbox mode +- Fixed code injection vulnerability by using illegal function names in `{function name='blah'}{/function}` ## [3.1.38] - 2021-01-08