##// END OF EJS Templates
forms: unified usage of h.secure_form. Make sure we ALWAYS pass in...
forms: unified usage of h.secure_form. Make sure we ALWAYS pass in request, and removed redundant 'POST' type.

File last commit:

r1:854a839a default
r2105:4ad1a937 default
Show More
release-notes-2.2.7.rst
13 lines | 256 B | text/x-rst | RstLexer

|RCE| 2.2.7 |RNS|

General

  • 2015-02-03

Fixes

  • Security: fixed severe issue with leaking of auth_tokens(api_keys) on the following API calls; get_repo, update_repo, get_locks, and get_user_groups.