Etherpad 1.5.3 is with us.. This release is a security release. The security issue is a big one so please do update…
Security
Don’t allow read files on directory traversal (CVE due very shortly)
Accessibility
Accessibility support for Screen readers, includes new fonts and keyboard shortcuts
API
API endpoint for Append Chat Message and Chat backend tests
Error messages displayed on load are included in Default Pad Text (can be suppressed)
Methods and functions
Content Collector can handle key values
getAttributesOnPosition Method returns applied attributes on a position
Bugfixes
Firefox keeps attributes (bold etc) on cut/copy -> paste
URL Parameter showControls=false now works
Cut and Paste works again…