Skip to content
/ security-http Public

v6.4.45

Choose a tag to compare

View all tags
@fabpot fabpot released this 30 Aug 21:23
· 535 commits to 8.2 since this release
Immutable release. Only release title and notes can be modified.
v6.4.45
This tag was signed with the committer’s verified signature.
fabpot Fabien Potencier
SSH Key Fingerprint: 2Epes5EqLalzBuDpYoQuproz9c57CsymvlzEGYtOXJw
Verified
Learn about vigilant mode.
acc78bd

Changelog (v6.4.44...v6.4.45)

  • bug #65735 Avoid failing when PersistentRememberMeHandler handles a malformed cookie (@Seldaek)
  • bug #65734 Reject malformed login link parameters instead of throwing a TypeError (@davidszkiba, @nicolas-grekas)
  • bug #65685 Narrow the race that lets a login link exceed max_uses (@nicolas-grekas)
  • bug #65655 Apply "signature_properties" when a remember-me token provider is used (@nicolas-grekas)

Contributors

Seldaek, nicolas-grekas, and davidszkiba
Assets 3
Loading