@@ -67,19 +67,20 @@ Fixed:
67
67
Anonymous user. Replaces the old Create permission. (John Rouillard)
68
68
- Allow '*' and explicit origins in allowed_api_origins. Only return
69
69
'Access-Control-Allow-Credentials' when not matching '*'. Fixes
70
- security issue with rest when using '*'.
70
+ security issue with rest when using '*'. (John Rouillard)
71
71
- issue2551263: In REST response expose rate limiting, sunset, allow
72
- HTTP headers to calling javascript.
72
+ HTTP headers to calling javascript. (John Rouillard)
73
73
- issue2551257: When downloading an attached (user supplied file),
74
74
make sure that an 'X-Content-Type-Options: nosniff' header is sent.
75
+ (John Rouillard)
75
76
- issue2551252 - default number of rounds for PKDF2 password increased
76
- to 2,000,000.
77
+ to 2,000,000. (John Rouillard)
77
78
- issue2551251 - migrate/re-encrypt PBKDF2 password if stored
78
79
password used a smaller number of rounds than set in
79
- password_pbkdf2_default_rounds.
80
+ password_pbkdf2_default_rounds. (John Rouillard)
80
81
- upgrade from jquery-3.5.1 to jquery-3.6.3. Update user.help.html
81
- to new version.
82
- - Dockerfile scanned with hadolint. Fixed multiple issues.
82
+ to new version. (John Rouillard)
83
+ - Dockerfile scanned with hadolint. Fixed multiple issues. (John Rouillard)
83
84
84
85
Features:
85
86
@@ -109,12 +110,14 @@ Features:
109
110
- issue2551243: schema-dump.py enhanced with anti-CSRF headers. Flake8
110
111
cleanup and python2 support. (John Rouillard)
111
112
- issue2551253 - new password hash PBDKF2-SHA512 added. Not available
112
- by default. See issue ticket for details.
113
+ by default. See issue ticket for details. (John Rouillard)
113
114
- roundup-admin migrate command reports the schema version.
114
115
- issue2551262 - the mail gateway subject prefix now allows spaces
115
116
before/after prefix. Also allow spaces between classname and id
116
117
number in prefix designator. So "[ issue 23 ] subject" is parsed
117
- like "[issue23] subject".
118
+ like "[issue23] subject". (John Rouillard)
119
+ - [doc]: add section on implementing CSP for Roundup to admin
120
+ doc. (John Rouillard)
118
121
119
122
2022-07-13 2.2.0
120
123
0 commit comments