diff options
| author | Andrey Andreev <narf@devilix.net> | 2015-10-31 18:30:41 +0100 |
|---|---|---|
| committer | Andrey Andreev <narf@devilix.net> | 2015-10-31 18:30:41 +0100 |
| commit | 0abc55a22535586929fb146a81d1cee68dbccd10 (patch) | |
| tree | 74da8cb615aec63817928591e61872b6242292a5 /user_guide_src/source/changelog.rst | |
| parent | f8deea583f0cb68a83a44d361c0db3c86f387f95 (diff) | |
[ci skip] Update changelog, version & upgrade instructions
Diffstat (limited to 'user_guide_src/source/changelog.rst')
| -rw-r--r-- | user_guide_src/source/changelog.rst | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/user_guide_src/source/changelog.rst b/user_guide_src/source/changelog.rst index f9f451d98..d67ae4e8c 100644 --- a/user_guide_src/source/changelog.rst +++ b/user_guide_src/source/changelog.rst @@ -5,7 +5,13 @@ Change Log Version 3.0.3 ============= -Release Date: Not Released +Release Date: October 31, 2015 + +- **Security** + + - Fixed an XSS attack vector in :doc:`Security Library <libraries/security>` method ``xss_clean()``. + - Changed :doc:`Config Library <libraries/config>` method ``base_url()`` to fallback to ``$_SERVER['SERVER_ADDR']`` when ``$config['base_url']`` is empty in order to avoid *Host* header injections. + - Changed :doc:`CAPTCHA Helper <helpers/captcha_helper>` to use the operating system's PRNG when possible. - Database |