##// END OF EJS Templates
u » ewong » rhodecode-enterprise-ce-fork
RSS

Fork of rhodecode-enterprise-ce

ip-restritions: fix issue with loading empty IP rules for non-logged not-anonymous users....
ip-restritions: fix issue with loading empty IP rules for non-logged not-anonymous users. This case won't have any IP rules set. And we accidentally loaded them becuase of no empty user filter was present. This caused some odd display warnings for users.
marcink - - Load All Authors

File last commit:

r1:854a839a default
r2838:d1dcf373 default
Show More
release-notes-3.3.2.rst
25 lines | 499 B | text/x-rst | RstLexer
/ docs / release-notes / release-notes-3.3.2.rst
History | Annotation | Raw |Copy content |Copy permalink

|RCE| 3.3.2 |RNS|

Release Date

  • 2015-06-05

security fixes

  • Stored XSS attempts on user login fields, and other text input fields.
  • DOM Based XSS attempts
  • HTML Injection
  • Cross frame scripting (XFS)
  • Invalidation of concurrent sessions on password change.
  • Downgrading of HTTPS connections.

fixes

  • Generation of URLs on system with custom URL prefixes.
  • VCSServer: Improved memory management of the cache data used by the server.