diff options
| author | Meik Sievertsen <acydburn@phpbb.com> | 2007-10-13 11:47:54 +0000 |
|---|---|---|
| committer | Meik Sievertsen <acydburn@phpbb.com> | 2007-10-13 11:47:54 +0000 |
| commit | d7fbabba471c398962e40f5d127f0c6d39943d19 (patch) | |
| tree | ca9bea661eb018308d21802bc8e0dc2a41cc7ced /phpBB/docs | |
| parent | 0b0a1f974e0d78e448df10a3e234692571de7e5e (diff) | |
| download | forums-d7fbabba471c398962e40f5d127f0c6d39943d19.tar forums-d7fbabba471c398962e40f5d127f0c6d39943d19.tar.gz forums-d7fbabba471c398962e40f5d127f0c6d39943d19.tar.bz2 forums-d7fbabba471c398962e40f5d127f0c6d39943d19.tar.xz forums-d7fbabba471c398962e40f5d127f0c6d39943d19.zip | |
RC6 preparation
git-svn-id: file:///svn/phpbb/trunk@8173 89ea8834-ac86-4346-8a33-228a782c2dd0
Diffstat (limited to 'phpBB/docs')
| -rw-r--r-- | phpBB/docs/CHANGELOG.html | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html index 3168ead82c..1d704796c3 100644 --- a/phpBB/docs/CHANGELOG.html +++ b/phpBB/docs/CHANGELOG.html @@ -118,6 +118,23 @@ <li>[Fix] Correct quote parsing if opening bracket before opening quote (Bug #14667)</li> <li>[Fix] Clean post message for checking length to prevent posting empty messages</li> <li>[Fix] Display jumpbox if needed for functionality (Bug #14702)</li> + <li>[Sec] Fixing possible XSS through compromised WHOIS server (#i63, #i64)</li> + <li>[Sec] Missing access control on whois in viewonline.php (#i51)</li> + <li>[Sec] Encoding some variables within user::page array correctly (to cope with browser not doing it correctly) to prevent XSS through functions re-using them (#i61)</li> + <li>[Sec] Fixed XSS through memberlist search feature (#i62)</li> + <li>[Sec] Fixed XSS through colour swatch (#i65)</li> + <li>[Sec] Fixed insecure attachment deletion (#i53)</li> + <li>[Sec] Only allow whitelisted protocols in meta_redirect/redirect (#i66)</li> + <li>[Sec] Check file names to be written in language management panel (#i52)</li> + <li>[Sec] Deregister globals if ini_get has been disabled (#i112)</li> + <li>[Sec] Added form tokens to most forms to enforce a lighter variant of CSRF protection (#i91 - #i96)</li> + <li>[Sec] Use new password hash method for forum passwords (#i43)</li> + <li>[Sec] Changed download file location to prevent flash crossdomain policies taking effect (#i8)</li> + <li>[Sec] Do not allow autocompletion for password on admin re-authentication (#i41)</li> + <li>[Sec] Made sure users are not completely locked out if they have a GLOBALS cookie (#i101)</li> + <li>[Sec] Use the secure hash to generate BBCODE_UIDs (#i71)</li> + <li>[Sec] Increase the length of BBCODE_UIDs (#i72)</li> + <li>[Sec] New password hashing mechanism for storing passwords (#i42)</li> </ul> <a name="v30rc4"></a><h3>1.ii. Changes since 3.0.RC4</h3> |