|
|
@@ -109,6 +109,27 @@ PRs are welcome! Please do open an issue to discuss first if it's a big feature,
|
|
|
- [ ] providers: Get Facebook integration on its feet (@ife)
|
|
|
- [ ] companion: what happens if access token expires during/between an download & upload (@ife)
|
|
|
|
|
|
+## 1.9.3
|
|
|
+
|
|
|
+Released: 2020-02-26
|
|
|
+
|
|
|
+This release patches a Server Side Request Forgery (SSRF) vulnerability on `@uppy/companion`
|
|
|
+
|
|
|
+| Package | Version | Package | Version |
|
|
|
+|-|-|-|-|
|
|
|
+| @uppy/companion | 1.9.3 | @uppy/robodog | 1.5.3 |
|
|
|
+| @uppy/drag-drop | 1.4.6 | @uppy/webcam | 1.5.5 |
|
|
|
+| @uppy/locales | 1.11.4 | uppy | 1.9.3 |
|
|
|
+| @uppy/react | 1.4.6 | - | - |
|
|
|
+
|
|
|
+- @uppy/companion: patch SSRF vulnerability (#2083 / @ifedapoolarewaju)
|
|
|
+- @uppy/webcam: Check the availability isTypeSupported api before calling (#2072 / @naveed-ahmad)
|
|
|
+- @uppy/locales: Locale DE_de added new keys. (#2084 / @SpazzMarticus)
|
|
|
+- @uppy/locales: Update zh_TW.js (#2075 / @cellvinchung)
|
|
|
+- @uppy/drag-drop: add a type test and document shared props (#2003 / @andychongyz)
|
|
|
+- @uppy/companion: make s3 signed url expiry configurable in companion (#2085 / @adamelmore)
|
|
|
+- build: contributors:save fix — the node.js version (#2078 / @arturi)
|
|
|
+
|
|
|
## 1.9.2
|
|
|
|
|
|
Released: 2020-02-14
|
ifedapoolarewaju