Documented security fix in changelog

justquick · Dec 23, 2010 · b92120b · b92120b
1 parent ed70b42
commit b92120b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/CHANGES b/CHANGES
@@ -40,6 +40,9 @@ Bugfix release, release date to be announced.
   module setups.
 - Fixed an issue where the subdomain setting for modules was
   ignored for the static folder.
+- Fixed a security problem that allowed clients to download arbitrary files
+  if the host server was a windows based operating system and the client
+  uses backslashes to escape the directory the files where exposed from.
 
 Version 0.6
 -----------