X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/5b8f2742f36071d42eb204e6826a67b5d8f40761..243739e1c355da4162dc1b41c04c11cc1fb676c0:/debian/changelog?ds=sidebyside

diff --git a/debian/changelog b/debian/changelog
index d4a1f2471..9085d97cb 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,14 @@
+ikiwiki (2.42) UNRELEASED; urgency=low
+
+  * aggregate: Correct a mistake in the code that dummy up a guid for feeds
+    lacking one.
+  * inline: Correct handling of urls relative to baseurl in feeds.
+  * Fix CSRF attacks against the preferences and edit forms. The fix involved
+    embedding the session id in the forms, and not allowing the forms to be
+    submitted if the embedded id does not match the session id. Closes: #475445
+
+ -- Joey Hess <joeyh@debian.org>  Thu, 03 Apr 2008 02:35:39 -0400
+
 ikiwiki (2.41) unstable; urgency=low
 
   [ Adeodato Simó ]