Skip to content

Version 0.7.2 (Security Improvement)
Compare
Choose a tag to compare
@kasparsd kasparsd released this 12 Sep 15:06
· 199 commits to master since this release
0.7.2
90a86f7
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
  • Security improvement: Store the second factor authentication step nonce hashed to prevent leaking it via database read access #453. Props to @calvinalkan for reporting the issue.
  • Fix: Add wp_specialchars_decode() to escape the HTML entity on the Email Subject line (#412), props @nbwpuk.
  • Fix: Use hash_equals() when comparing the email token (#425), props @Mati02K.
  • Tooling: Introduce @wordpress/env for development tooling and move to GitHub actions for CI (#436).
Assets 2