rhodecode-enterprise-ce Files · docs/release-notes/release-notes-2.2.7.rst

security: use new safe escaped user attributes across the application....

security: use new safe escaped user attributes across the application. - will fix all possible XSS attack vectors.

marcink - - Load All Authors

File last commit:

r1:854a839a default


                r1815:7cb6e1ce

default

Download file

             release-notes-2.2.7.rst
        
                    13 lines
            
             | 256 B
            
                | text/x-rst
            
             |
                RstLexer
            
             / docs / release-notes / release-notes-2.2.7.rst
          
                    History
                
                 |
                  Source
                 | Raw
                 |Copy content
                 |Copy permalink

        marcink
    
project: added all source files and assets

              r1
            
      |RCE| 2.2.7 |RNS|

      -----------------

      General

      ^^^^^^^

       * 2015-02-03

      Fixes

      ^^^^^

       * Security: fixed severe issue with leaking of auth_tokens(api_keys) on the

         following API calls; ``get_repo``,

         ``update_repo``, ``get_locks``, and ``get_user_groups``.

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

marcink project: added all source files and assets	r1	\|RCE\| 2.2.7 \|RNS\|
		-----------------

		General
		^^^^^^^
		* 2015-02-03

		Fixes
		^^^^^

		* Security: fixed severe issue with leaking of auth_tokens(api_keys) on the
		following API calls; ``get_repo``,
		``update_repo``, ``get_locks``, and ``get_user_groups``.