diff CHANGES.txt @ 5147:d16ba6e6624b

upgrade CHANGES.txt and doc/upgrading.txt with additional info about implications of fixing path traversal bug in d22eb1d40d0e
author John Rouillard <rouilj@ieee.org>
date Thu, 14 Jul 2016 21:43:17 -0400
parents d22eb1d40d0e
children 6bbb6dd97458
line wrap: on
line diff
--- a/CHANGES.txt	Thu Jul 14 19:24:31 2016 -0400
+++ b/CHANGES.txt	Thu Jul 14 21:43:17 2016 -0400
@@ -291,7 +291,8 @@
   with a specific name is created in the html subdirectory, the
   template name in the url can be used to get access to files outside
   of the tracker html directory. This has been fixed by normalizing
-  the path and comparing to the normalized path for the html directory.
+  the path and comparing to the normalized path for the html
+  directory. See ``doc/upgrading.txt``. (John Rouillard)
 
 2016-01-11: 1.5.1
 

Roundup Issue Tracker: http://roundup-tracker.org/