Torrents Stats
- Partagées
- 130 Go
- Téléchargées
- 0 bytes
- Ratio
- -
- Messages
- 1
- J'aime
- 0
- Trophées
- 7
- Inscrit
- 20 Mars 2023
Thank youVersions XF 2.x compatibles 2.2
Aujourd'hui, nous publions XenForo 2.2.11 pour résoudre une faille de sécurité potentielle. Nous recommandons à tous les clients exécutant XenForo 2.2 de passer à la version 2.2.11 ou d'utiliser le fichier de correctif joint dès que possible.
The problem is the injection of HTML attributes that can be triggered when rendering editor content, such as when an article is edited or cited.
XenForo thanks the @@PaulB security researcher, @@NamePros team, and @@Xon for reporting the issues.
We recommend that you perform a full upgrade to resolve the issues, but a fix can be applied manually. See below for details.
Note: There are no other changes in this release and any work previously done towards XenForo 2.2.11 – including a new CAPTCHA option by Cloudflare Turnstile and various bug fixes and improvements – will be released alongside XenForo 2.2.12 in the coming weeks.
Apply a patch manually
Download the 2211patch file.zip attached to this message. It will contain the following file:
Extract the zip file to your computer and upload the contents to the root of your XenForo installation. This should overwrite the files on your server with the new version.
- src/XF/BbCode/Renderer/EditorHtml.php
Remark: If you decide to fix the files instead of performing a full upgrade, your "File Status Check" will flag that file as having "Unexpected Content". Since these files no longer contain the same content that your version of XF shipped with, this is normal and can be safely ignored.
As always, new versions of XenForo are free to download for all customers with active licenses, who can now retrieve the new version in the Customer Center or upgrade it from your admin control panel (Tools > Check for Updates...).
One-click upgrade to XenForo 2.2.11
Directly from your admin control panel
Installation and upgrade instructions
You can find all the details about installing and upgrading XenForo in the XenForo 2 manual. We strongly recommend that you upgrade directly from your control panel.
Cloud customers received this patch automatically and do not require an upgrade.
[Hidden content]
All my resources here