##// END OF EJS Templates
auth-token: expose fetched token in unified way into request attribute....
auth-token: expose fetched token in unified way into request attribute. - This will allow re-using exposed access token for HTTP views in single place - We will support also exposing tokens from url if special _auth_token will be used as url param - We'll no longer require double logic for extraction of URL/HEADER auth-tokens and have a single place to extract it.

File last commit:

r2236:d9578663 stable
r4002:5f150e86 default
Show More
release-notes-4.10.3.rst
45 lines | 666 B | text/x-rst | RstLexer

|RCE| 4.10.3 |RNS|

Release Date

  • 2017-11-11

New Features

General

  • ldap: increase timeouts and timelimits for operations

Security

  • security(low): fix self xss on repo downloads picker for svn case.

Performance

Fixes

  • Pull requests: loosen permissions on creation of PR, fixing regression.
  • LDAP: fix regression in ldap search filter implementation after upgrade to newer version of python-ldap library.

Upgrade notes

  • Changes helpers to support regression in PR creation and increase LDAP server timeouts, no potential problems with upgrade.