云瑞 发表于 2011-2-8 10:42:53

WordPress 3.0.5 发布

2010年2月7日,WordPress 3.0.5公开发布,这是一个面向安全的更新,并没有提供功能上的改进。
在3.0.5版本中,数据库模块的版本号(db_version in wp_options)依旧是15477.

下载: http://wordpress.org/download/release-archive/

Summary

* Fix XSS bug: Properly encode title used in Quick/Bulk Edit, and offer additional saniziation to various fields. Affects users of the Author or Contributor role. (r17397, r17406, r17412)
* Fix XSS bug: Preserve tag escaping in the tags meta box. Affects users of the Author or Contributor role. (r17401)
* Fix potential information disclosure of posts through the media uploader. Affects users of the Author role. (r17393)
* Enhancement: Force HTML filtering on comment text in the admin (r17400)
* Enhancement: Harden check_admin_referer() when called without arguments, which plugins should avoid. (r17387)
* Update the license to GPLv2 (or later) and update copyright information for the KSES library.
页: [1]
查看完整版本: WordPress 3.0.5 发布