Release v1.7.4 - Prevent bypassing YOURLS proxy URL filter

[elrido]

• CHANGED: Saving markdown pastes uses .md extension instead of .txt (Save Paste button should save to .md extension if paste format is markdown #1293)
• CHANGED: Enable strict type checking in PHP (enable strict types #1350)
• CHANGED: Various tweaks of the bootstrap5 template, suggested by the community
• FIXED: Reset password input field on creation of new paste (Password field is not reset when clicking 'New ' #1194)
• FIXED: Allow database schema upgrade to skip versions (refactor database schema upgrade to support skipping versions #1343)
• FIXED: bootstrap5 dark mode toggle unset on dark browser preference ("Dark mode" toggle in Bootstrap 5 theme is not syncronised with prefers-color-scheme at start (when dark) #1340)
• FIXED: Prevent bypassing YOURLS proxy URL filter, allowing to shorten non-self URLs

This release addresses an issue with the YOURLS proxy's filter that allowed it to shorten other URLs then the configured PrivateBin instance. This issue only affects instances that use the YOURLS URL-shortener proxy. A security advisory will get published shortly and linked here.

---

This discussion was created from the release Release v1.7.4 - Prevent bypassing YOURLS proxy URL filter.