CHANGELOG.md: Add entry for re-registration ban

This commit is contained in:
rinpatch 2020-05-01 00:33:04 +03:00
parent 9a92e5a351
commit d589f3dcfb

View File

@ -38,6 +38,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
## [unreleased-patch]
### Security
- Disallow re-registration of previously deleted users, which allowed viewing direct messages addressed to them
- Mastodon API: Fix `POST /api/v1/follow_requests/:id/authorize` allowing to force a follow from a local user even if they didn't request to follow
### Fixed