summaryrefslogtreecommitdiff
path: root/CHANGELOG
diff options
context:
space:
mode:
authorthomascube <thomas@roundcube.net>2011-02-03 22:08:03 +0000
committerthomascube <thomas@roundcube.net>2011-02-03 22:08:03 +0000
commit784a425e07f8b249b44137eadfe2a5dfe436aaeb (patch)
treef20c33632b6e0f69319601c78dd86b70291d92da /CHANGELOG
parent6ec4658f7230424245a6441fc910108866be26ab (diff)
protect login form submission from CSRF using a request token
Diffstat (limited to 'CHANGELOG')
-rw-r--r--CHANGELOG1
1 files changed, 1 insertions, 0 deletions
diff --git a/CHANGELOG b/CHANGELOG
index b9d68b71d..9e5aadd14 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,6 +1,7 @@
CHANGELOG Roundcube Webmail
===========================
+- Security: protect login form submission from CSRF
- Security: prevent from relaying malicious requests through modcss.inc
- Fix handling of non-image attachments in multipart/related messages (#1487750)
- Fix IDNA support when IDN/INTL modules are in use (#1487742)