Lemmy 0.18.2 Security Release | BE ➡ 0.18.2 | UI ➡ 0.18.2

Security and Performance Improvements

https://join-lemmy.org/news/2023-07-11_-_Lemmy_Release_v0.18.2

Latest Backend (BE) Release Candidate (RC)

Latest Frontend (UI) Release Candidate (RC)

5 points · 5 comments · view on lemmy.world

5 Comments

necropola@lemmy.world · 4 pts · 3y

BE ➡ 0.18.2-rc.2 | UI ➡ 0.18.2-rc.2

Now using release branches (release/v0.18) for BE and UI

necropola@lemmy.world · 4 pts · 3y

BE ➡ 0.18.2 | UI ➡ 0.18.2

@meldrik@lemmy.wtf
Probably does not hurt to upgrade, despite the fact that we didn't have any custom emojis.

Additionally it disallows inline Javascript using Content Security Policy. This should ensure that XSS vulnerabilities are impossible from now on.

necropola@lemmy.world · 3 pts · 3y (2 replies)

@meldrik@lemmy.wtf If lemmy.wtf is using custom emojis, you should probably update to the latest UI Release Candidate, i. e. the latest lemmy-ui docker image.

meldrik@lemmy.wtf · 4 pts · 3y (1 reply)

It is not, so we are safe.

necropola@lemmy.world · 3 pts · 3y