Sage 1.3.9 has been released. This maintenance release provides two security enhancements and several other fixes.

• Alt+S is overriden by the History shortcut of Firefox 2.0
• Clicking on feed populates current window -and- a new browser window
• html sanitizer doesn’t properly handle tags with multiple opening brackets
• feed link and feeditem link can contain malicious javascript
• atom:link elements in RSS feeds misinterpreted as feed.link