##// END OF EJS Templates
u » pc » rhodecode-enterprise-ce-fork-pc
RSS

Fork of rhodecode-enterprise-ce

security: use safe escaped version of description for repo and repo group to potentially...
security: use safe escaped version of description for repo and repo group to potentially prevent any XSS attacks on returned data.
marcink - - Load All Authors

File last commit:

r1:854a839a default
r1830:d786fdd7 default
Show More
release-notes-2.2.7.rst
13 lines | 256 B | text/x-rst | RstLexer
/ docs / release-notes / release-notes-2.2.7.rst
History | Annotation | Raw |Copy content |Copy permalink

|RCE| 2.2.7 |RNS|

General

  • 2015-02-03

Fixes

  • Security: fixed severe issue with leaking of auth_tokens(api_keys) on the following API calls; get_repo, update_repo, get_locks, and get_user_groups.