Security fixes#4478

Merged

JedWatson merged 13 commits intomasterfrom molomby/sec-fixes

Oct 23, 2017

+190-6,821

Commits on Oct 16, 2017

Fixing CSRF by reverting the (well meaning) changes made in PR 3756 (keystonejs/keystone#3756 ). I don't know if this will resurface issue 3420 (keystonejs/keystone#3420 ), which the PR apparently ad…
molomby
committed
Add some functionality to prevent macro injection via CSV export
molomby
committed
Fixing file extention
molomby
committed
extract password validation so users can access the validation within their own code for things like password reset

export-mike
authored and
molomby
committed
Correcting password type check in PasswordType

Vito Belgiorno-Zegna
authored and
molomby
committed
Expanding password field configuration options and improving defaults (to align with current NIST guidelines). Updating, expanding on and clarifying relevant docs.
molomby
committed
Escaping values in the raw value of markdown field so it can be safely displayed within an HTML document
molomby
committed
Sanitization update to markdown fields -- remove unsafe html tags from the markdown value before it's rendered into html
molomby
committed
Updating the markdown fieldtype docs to include the new sanitizer options
molomby
committed
Prep'ing for release as 4.0.0-beta.6
molomby
committed

Commits on Oct 23, 2017