diff --git a/actionview/CHANGELOG.md b/actionview/CHANGELOG.md index 6717004ceb..43688fc8a7 100644 --- a/actionview/CHANGELOG.md +++ b/actionview/CHANGELOG.md @@ -2,7 +2,7 @@ * Only accept formats from registered mime types - A lack of filtering on mime types could allow an a attacker to read + A lack of filtering on mime types could allow an attacker to read arbitrary files on the target server or to perform a denial of service attack.