Mercurial > p > roundup > code
diff CHANGES.txt @ 6026:e2b70d43d0fc
Document issues with xmlrpc security of python built in libraries
Added note to changes with better description and link to defusedxml
in the xmlrpc doc.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Fri, 03 Jan 2020 19:22:54 -0500 |
| parents | 0e04fcdd1ff2 |
| children | 302eceff0c49 |
line wrap: on
line diff
--- a/CHANGES.txt Thu Jan 02 21:04:21 2020 -0500 +++ b/CHANGES.txt Fri Jan 03 19:22:54 2020 -0500 @@ -70,6 +70,7 @@ is used. Fixed three places where the value of a hidden @action input field was translated. (Reported by Ludwig Reiter. John Rouillard) +- Document security issues in xmlrpc interface in doc/xmlrpc.txt. 2019-10-23 2.0.0 alpha 0