this post was submitted on 10 Jul 2023
5 points (100.0% liked)

lemmy.wtf meta

165 readers
6 users here now

Anything about the lemmy.wtf instance and its moderation.

For discussion about the Lemmy software project, go to c/lemmy.

founded 1 year ago
MODERATORS
[email protected]
5
Lemmy 0.18.2 Security Release | BE ➡ 0.18.2 | UI ➡ 0.18.2 (lemmy.world)
submitted 1 year ago* (last edited 1 year ago) by necropola to c/[email protected]
5 comments fedilink hide all child comments
 

Security and Performance Improvements

https://join-lemmy.org/news/2023-07-11_-_Lemmy_Release_v0.18.2

Latest Backend (BE) Release ~~Candidate (RC)~~

Latest Frontend (UI) Release ~~Candidate (RC)~~

top 5 comments
sorted by: hot top controversial new old
[–] necropola 4 points 1 year ago* (last edited 1 year ago)

BE ➡ 0.18.2-rc.2 | UI ➡ 0.18.2-rc.2

Now using release branches (release/v0.18) for BE and UI

[–] necropola 4 points 1 year ago* (last edited 1 year ago)

BE ➡ 0.18.2 | UI ➡ 0.18.2

@[email protected]
Probably does not hurt to upgrade, despite the fact that we didn't have any custom emojis.

Additionally it disallows inline Javascript using Content Security Policy. This should ensure that XSS vulnerabilities are impossible from now on.

[–] necropola 3 points 1 year ago* (last edited 1 year ago) (1 children)

@[email protected] If lemmy.wtf is using custom emojis, you should probably update to the latest UI Release Candidate, i. e. the latest lemmy-ui docker image.

[–] [email protected] 4 points 1 year ago (1 children)

It is not, so we are safe.

[–] necropola 3 points 1 year ago