##// END OF EJS Templates
rhodecode-enterprise-ce
RSS
security: use new safe escaped user attributes across the application....
security: use new safe escaped user attributes across the application. - will fix all possible XSS attack vectors.
marcink - - Load All Authors

File last commit:

r1:854a839a default
r1815:7cb6e1ce default
Show More
release-notes-2.2.7.rst
13 lines | 256 B | text/x-rst | RstLexer
/ docs / release-notes / release-notes-2.2.7.rst
History | Annotation | Raw |Copy content |Copy permalink

|RCE| 2.2.7 |RNS|

General

  • 2015-02-03

Fixes

  • Security: fixed severe issue with leaking of auth_tokens(api_keys) on the following API calls; get_repo, update_repo, get_locks, and get_user_groups.