summaryrefslogtreecommitdiffstats
path: root/user_guide_src
diff options
context:
space:
mode:
authorAndrey Andreev <narf@devilix.net>2017-01-04 15:01:27 +0100
committerAndrey Andreev <narf@devilix.net>2017-01-04 15:01:27 +0100
commit5a2390d4d6287f2ce35cadae4713b7dcd10fdc9b (patch)
tree8451e543979cded3be535dbd8d5aa92e0df5f3a0 /user_guide_src
parent2ab1c1902711c8b0caf5c3e8f2fa825d72f6755d (diff)
[ci skip] Protect CSRF verification from timing side-channel attacks
Diffstat (limited to 'user_guide_src')
-rw-r--r--user_guide_src/source/changelog.rst1
1 files changed, 1 insertions, 0 deletions
diff --git a/user_guide_src/source/changelog.rst b/user_guide_src/source/changelog.rst
index ad7d6a4ed..7284d100c 100644
--- a/user_guide_src/source/changelog.rst
+++ b/user_guide_src/source/changelog.rst
@@ -10,6 +10,7 @@ Release Date: Not Released
- **Security**
- Fixed an XSS vulnerability in :doc:`Security Library <libraries/security>` method ``xss_clean()``.
+ - Added protection against timing side-channel attacks in :doc:`Security Library <libraries/security>` method ``csrf_verify()``.
- General Changes