indico/indico: v3.2.6

Published July 20, 2023 | Version v3.2.6

Software Open

:warning: Security fixes

Fix an XSS vulnerability in various confirmation prompts commonly used when deleting things. Exploitation requires someone with at least submission privileges (such as a speaker) and then rely on someone else to attempt to delete this content. However, considering that event organizers may indeed delete suspicious-looking content when encountering it, there is a non-negligible risk of such an attack to succeed. Because of this it is strongly recommended to upgrade as soon as possible (#5862, CVE-2023-37901, GHSA-fmqq-25x9-c6hm)

:flags: Internationalization

:tada: Improvements

Show which files were added or modified on each editing timeline revision (#5802)
Support rendering Japanese, Chinese & Korean letters in PDFs (#3120, #5842, thanks @adamjenkins)
Add button to adapt columns widths on the reviewing area's abstracts list (#5837)
Allow cloning category-level badge/poster templates into another category (#5775, thanks @SegiNyn)
Allow using a custom link text in the {event_link} email placeholder, using the {event_link:something-else-here} syntax (#5858, #5860)
Add option to add "event cancelled" semantics for event labels, which will disable reminders for events having this label (#5285, #5861)

:bug: Bugfixes

:wrench: Internal Changes

Files

Name	Size	Download all
indico/indico-v3.2.6.zip md5:5e9b904fa7b5de8189db4e219210df9b	14.4 MB	Preview Download