Users running a non-download version of Vanilla (pulled from github), on branch release/2019.016 or master from the last 2 weeks should upgrade to release/2019.017 or latest master for security reasons. Downloaded official open sources releases are not affected.
nervoustwit Vanilla Staff
Get it right here: https://open.vanillaforums.com/addon/vanilla-core-2.8.3 Our Hacker One bounty campaign continues to bear fruit helping us to harden our code. In this release: Patching XSS vulnerab… (View Post)4
I would definitely give pockets a try first if I were @us3r . As for my profile photo, I am the handsome one. (View Post)1