diff options
author | Jeremy Harris <jgh146exb@wizmail.org> | 2020-01-11 21:49:10 +0000 |
---|---|---|
committer | Jeremy Harris <jgh146exb@wizmail.org> | 2020-01-11 21:49:10 +0000 |
commit | 7d99cba1d36af854760c35100b29f0331f619fca (patch) | |
tree | 2db4daa38dd356d5ffdd3d704ee752848b4c1208 /doc/doc-txt/ChangeLog | |
parent | 9214d2e4dfd9d4f29e9cb7a0eea8a0758ed1b34a (diff) |
redirect router: taint-enforce filenames
Diffstat (limited to 'doc/doc-txt/ChangeLog')
-rw-r--r-- | doc/doc-txt/ChangeLog | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog index c803fdb7e..33381d558 100644 --- a/doc/doc-txt/ChangeLog +++ b/doc/doc-txt/ChangeLog @@ -87,8 +87,10 @@ JH/19 Bug 2507: Modules: on handling a dynamic-module (lookups) open failure, were used, and the second one (for mainlog/paniclog) retrieved null information. -JH/20 Taint checking: disallow use of tainted data for the appendfile transport - file and directory options, and for the pipe transport command. +JH/20 Taint checking: disallow use of tainted data for + - the appendfile transport file and directory options + - the pipe transport command + - file names used by the redirect router (including filter files) Previously this was permitted. |