diff --git a/docs/changelog.rst b/docs/changelog.rst index 57ef5be0..1ae9df2b 100644 --- a/docs/changelog.rst +++ b/docs/changelog.rst @@ -12,7 +12,7 @@ Changelog .. warning:: This release contains a security fix related to authenticated writable canned queries. If you are using this feature you should upgrade as soon as possible. -- **Security fix:** CSRF tokens were incorrectly included in read-only canned query forms, which could allow them to be leaked to a sophisticated attacker. See `issue xxx <>`__ for details. +- **Security fix:** CSRF tokens were incorrectly included in read-only canned query forms, which could allow them to be leaked to a sophisticated attacker. See `issue 918 `__ for details. - Datasette now supports GraphQL via the new `datasette-graphql `__ plugin - see `GraphQL in Datasette with the new datasette-graphql plugin `__. - Principle git branch has been renamed from ``main`` to ``master``. (`#849 `__) - New debugging tool: ``/-/allow-debug tool`` (`demo here `__) helps test allow blocks against actors, as described in :ref:`authentication_permissions_allow`. (`#908 `__)