# HG changeset patch
# User Alain Mazy <am@osimis.io>
# Date 1645451712 -3600
# Node ID 0acc49da84ab3c216974f5da2dab403f6635deaf
# Parent  92e84e9d2ccaecdd8d83da785f0d8a3258a0c2ae
news

diff -r 92e84e9d2cca -r 0acc49da84ab NEWS
--- a/NEWS	Mon Feb 21 13:01:18 2022 +0100
+++ b/NEWS	Mon Feb 21 14:55:12 2022 +0100
@@ -30,6 +30,8 @@
   to read instances from storage when creating a Zip archive/media.
 * Support decoding of black-and-white images (with 1 bit per pixel), notably DICOM SEG
 * Added links to download attachments from the Orthanc Explorer
+* Fix XSS inside DICOM in Orthanc Explorer (as reported by Stuart Kurutac, NCC Group).  
+  XSS Issues were re-introduced in Orthanc 1.9.5.
 
 REST API
 --------