v0.22.3 release notes

Bug fixes

  • Form submission emails were broken on custom form pages which override get_form_fields() and do not return fields as classes inheriting AbstractFormField (Bug was introduced in 0.22.2).

  • Prevent upward path traversals outside of CODERED_PROTECTED_MEDIA_ROOT when serving protected media files. This only applies to logged in users, anonymous users do not have permission to access this URL.