4.10.9

What's Changed

• CVE-2021-41559 Disable xml entities by @emteknetnz in #10376
• [CVE-2022-25238] Sanitise htmlfields serverside by default by @emteknetnz in #10375
• [CVE-2022-28803] Block XSS in links and iframes. by @GuySartorelli in #10374

Full Changelog: 4.10.8...4.10.9

4.10.8

What's Changed

• FIX Correctly remove relations with ManyManyThroughList::removeall by @GuySartorelli in #10295

Full Changelog: 4.10.7...4.10.8

4.10.7

What's Changed

• FIX Resolve deduping problem with group codes. by @GuySartorelli in #10333

Full Changelog: 4.10.6...4.10.7

4.9.4

What's Changed

• FIX Correctly remove relations with ManyManyThroughList::removeall by @GuySartorelli in #10295

Full Changelog: 4.9.3...4.9.4

4.10.6

What's Changed

• MNT Use correct branch of installer for travis builds. by @GuySartorelli in #10315
• FIX Use DataColumns content when available in CSV export by @sig-steve in #10310

New Contributors

• @sig-steve made their first contribution in #10310

Full Changelog: 4.10.5...4.10.6

4.10.5

What's Changed

• FIX Default GridField search fields with an index of 0 to use StartWithFilter by @emteknetnz in #10211
• MNT Fix unit tests for kitchen-sink by @emteknetnz in #10287

Full Changelog: 4.10.4...4.10.5

4.10.4

What's Changed

• FIX Handle admin_email array config by @emteknetnz in #10258

Full Changelog: 4.10.3...4.10.4

4.9.3

What's Changed

• FIX Handle admin_email array config by @emteknetnz in #10258

Full Changelog: 4.9.2...4.9.3

4.10.3

What's Changed

• ENH Create fallback email from address by @emteknetnz in #10236
• MNT Add void return to EmailTest setup by @emteknetnz in #10252

Full Changelog: 4.10.2...4.10.3

4.9.2

What's Changed

• remove login marker cookie on logout by @xini in #10021
• FIX Look for existing modules in vendor folder rather than base folder by @emteknetnz in #10179
• DOC Fix type in 4.9.0 changelog by @maxime-rainville in #10152
• ENH Create fallback email from address by @emteknetnz in #10236

Full Changelog: 4.9.1...4.9.2