##// END OF EJS Templates
u » pc » rhodecode-enterprise-ce-fork-pc
RSS

Fork of rhodecode-enterprise-ce

security: use 404 instead of 403 in case missing permissions for comment deletion....
security: use 404 instead of 403 in case missing permissions for comment deletion. - prevents resource discovery
marcink - - Load All Authors

File last commit:

r1:854a839a default
r1826:76aa3640 default
Show More
release-notes-2.2.7.rst
13 lines | 256 B | text/x-rst | RstLexer
/ docs / release-notes / release-notes-2.2.7.rst
History | Annotation | Raw |Copy content |Copy permalink

|RCE| 2.2.7 |RNS|

General

  • 2015-02-03

Fixes

  • Security: fixed severe issue with leaking of auth_tokens(api_keys) on the following API calls; get_repo, update_repo, get_locks, and get_user_groups.