LORIS Release v23.0.5
This bugfix release includes all bug fixes since the 23.0.4 release.
For a full list of changes follow this link
Noteworthy changes:
- [Publication] Set Content-Type for ajax responses. This could lead to an XSS attack if a user is tricked into directly accessing an ajax endpoint. The frontend was not directly vulnerable. (#7532)
- [Configuration] Fix saving of values when no previous value present (#7507)
- [Raisinbread] Fixing help_editor module to display RB instrument instructions (#6907)
- [Config] assign user creating project to a newly created project (#7505)
- [Filter] Fix Menu Filter logic to use exact match for "Sex" fields (#7498)