Skip to content

v3.3.1

Latest
Latest

Choose a tag to compare

View all tags
@pfh59 pfh59 released this 27 Jul 20:02
v3.3.1
9240bb2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v3.3.1

What's Changed

🔒 Security

  • Fixed missing per-map authorization check in the SignalR hub — any authenticated user could enumerate mapIds to receive (and inject) real-time intel for other corporations/alliances. PR #429
  • Fixed authorization handlers trusting the client-supplied client_uid cookie without verifying it belongs to the authenticated character (cookie-fixation privilege escalation). PR #429

🛠 Maintenance

  • Resolved all compiler warnings and all 50 SonarCloud issues; added ~20 unit tests for EveMapperAccessHelper (100% line/branch coverage). PR #428
  • Ensured cancellation tokens are passed to all async tasks; replaced Cancel with CancelAsync where applicable.
  • Refactored EveMapper services, authorization handlers, and metrics for clarity; removed unnecessary null-forgiving operators.
  • Updated NuGet packages and .Net version used.
  • Added Kubernetes resource requests for postgres/redis and adjusted evemapper-app memory allocation.

Full Changelog: v3.3.0...main

Full Changelog: v3.3.0...v3.3.1

Assets 5
Loading