From 681ba6fc3c296cd6cd11050531b8f4e785141786 Mon Sep 17 00:00:00 2001 From: Aleksander Machniak Date: Tue, 16 Dec 2014 13:28:48 +0100 Subject: Improve system security by using optional special URL with security token Allows to define separate server/path for image/js/css files Fix bugs where CSRF attacks were still possible on some requests --- CHANGELOG | 3 +++ 1 file changed, 3 insertions(+) (limited to 'CHANGELOG') diff --git a/CHANGELOG b/CHANGELOG index 60ec32467..5b541cda7 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,11 +1,14 @@ CHANGELOG Roundcube Webmail =========================== +- Improve system security by using optional special URL with security token - use_secure_urls +- Allow to define separate server/path for image/js/css files - assets_url/assets_dir - Fix import of multiple contact email addresses from Outlook-csv format (#1490169) - Fix drag-n-drop to folders expanded while dragging (#1490157) - Fix import of multiple contact groups from Google-csv format (#1490159) - Fix import of contacts with multiple email addresses from Google-csv format (#1490178) - Fix generation of Blowfish-based password hashes (#1490184) +- Fix bugs where CSRF attacks were still possible on some requests RELEASE 1.1-beta ---------------- -- cgit v1.2.3