diff --git a/modules/ROOT/pages/8.4.0-release-notes.adoc b/modules/ROOT/pages/8.4.0-release-notes.adoc index 9d8d4ba772..cb28216d67 100644 --- a/modules/ROOT/pages/8.4.0-release-notes.adoc +++ b/modules/ROOT/pages/8.4.0-release-notes.adoc @@ -69,6 +69,20 @@ The {productname} {release-version} release includes an accompanying release of For information on the **** plugin, see: xref:.adoc[]. +=== Full Page HTML + +The {productname} {release-version} release includes an accompanying release of the **Full Page HTML** premium plugin. + +**Full Page HTML** includes the following fix. + +==== Pasting an HTML document was vulnerable to XSS attacks +// #TINY-13673 + +A cross-site scripting (XSS) vulnerability was discovered in the Full Page HTML plugin. Previously, malicious code within the document `` was able to be executed when pasted. + +This vulnerability has been patched in {productname} {release-version} by ensuring that content in the document `` is properly encoded. + +For information on the **Full Page HTML** plugin, see: xref:fullpagehtml.adoc[Full Page HTML]. [[accompanying-premium-plugin-end-of-life-announcement]] == Accompanying Premium plugin end-of-life announcement