As part of our security team's review, we have made some changes to the default settings in a new Joomla installation. As these changes are only applied to new installations, we strongly recommend that you review these changes and update your site.The changed settings are: Global Configuration > Text Filters: The default "Administrator" user group has changed from "No Filtering" to "Default Blacklist"
Users > Send Password: The option to send a user their password in plain text when an account is created is now disabled by default
Media Manager: Flash files ("swf" file extension and "application/x-shockwave-flash" MIME Type) are not allowed to be uploaded
Articles > Show Email: The option to show an email icon with articles is disabled by defaultWe have created a dedicated documentation page explaining these changes.