2 commits

Author	SHA1	Message	Date
Hayden	ae59f04b9f	fix: allow-iframe-embeds (#2009) ... * allow embedding iframes * fix alignment issue for buttons	2023-01-08 09:50:26 -09:00
Hayden	13850cda1f	security: multiple reported CVE fixes (#1515) ... * update out of date license * update typing / refactor * fix arbitrarty path injection * use markdown sanatizer to prevent XSS CWE-79 * fix CWE-918 SSRF by validating url and mime type * add security docs * update recipe-scrapers * resolve DOS from arbitrary url * update changelog * bump version * add ref to #1506 * add #1511 to changelog * use requests decoder * actually fix encoding issue	2022-07-31 13:10:20 -08:00