From 92092b8c34b62533c9be46592e819d4d6f3a8466 Mon Sep 17 00:00:00 2001 From: Micah Lee Date: Mon, 17 Jan 2022 09:56:23 -0800 Subject: Update changelog --- CHANGELOG.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 442f688f..ce455a45 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,18 @@ # OnionShare Changelog +## 2.5 + +* Security fix: Sanitize the path parameter in History item widget to be plain text +* Security fix: Use microseconds in Receive mode directory creation to avoid potential DoS +* Security fix: Several hardening improvements for session and username management in Chat mode, to prevent impersonation and other issues +* Major feature: Obtain bridges from Moat / BridgeDB (over a domain-fronted Meek client) +* Major feature: Snowflake bridge support +* New feature: Tor connection settings, as well as general settings, are now Tabs rather than dialogs +* New feature: User can customize the Content-Security-Policy header in Website mode +* New feature: Built-in bridges are automatically updated from Tor's API when the user has chosen to use them +* Switch to using our `stem` fork called `cepa`, which is now published on Pypi so we can build it in releases +* Various bug fixes + ## 2.4 * Major feature: Private keys (v3 onion client authentication) replaces passwords and HTTP basic auth -- cgit v1.2.3-54-g00ecf