comparison CHANGES.txt @ 5726:e199d0ae4a25

issue2551033: prevent reverse engineering hidden data by using etags as an oracle to identify when the right data has been guessed. Identified by Joseph Myers who also suggested remediation methods. Implemented John Rouillard.
author John Rouillard <rouilj@ieee.org>
date Thu, 23 May 2019 18:56:57 -0400
parents 6923225fd781
children 943e61bc26d5
comparison
equal deleted inserted replaced
5725:6923225fd781 5726:e199d0ae4a25
126 Cédric Krier, John Rouillard) 126 Cédric Krier, John Rouillard)
127 - issue2550144 - fix use of undefined icing macro in devel 127 - issue2550144 - fix use of undefined icing macro in devel
128 template. Replace with frame macro. (Cédric Krier) 128 template. Replace with frame macro. (Cédric Krier)
129 - handle UnicodeDecodeError in file class when file contents are 129 - handle UnicodeDecodeError in file class when file contents are
130 not text (e.g. jpg). (John Rouillard) 130 not text (e.g. jpg). (John Rouillard)
131 - issue2551033: prevent reverse engineering hidden data by using etags
132 as an oracle to identify when the right data has been
133 guessed. (Joseph Myers, John Rouillard)
131 134
132 2018-07-13 1.6.0 135 2018-07-13 1.6.0
133 136
134 Features: 137 Features:
135 138

Roundup Issue Tracker: http://roundup-tracker.org/