Release Notes March 1, 2022

We are happy to announce that we’ve released a new version on March 1st, 2022.

You will automatically get the latest version.

Removal

Removed the LaTeX Math Reference macro. This macro couldn’t be used with newer Latex macros anymore, as the anchor feature was removed a while ago. Existing instances of the macro continue to work, but will be deprecated as well in an upcoming release.
Please use Confluence anchors and links instead.

Fixed cross-site scripting (XSS) vulnerabilities in Latex Macros, where links with Javascript could be included.
Fixed cross-site scripting (XSS) vulnerabilities in Latex and Ascii Math macro editor, where HTML with Javascript could be placed.
Fixed an authentication vulnerability when Anonymous Access is enabled for Confluence, where an anonymous user could forge JWT tokens and store admin configuration.

Do you have any questions, suggestions, or problems?

Let us know. We’re glad to help!