·
38 commits
to 8.2
since this release
Immutable
release. Only release title and notes can be modified.
Changelog (v8.1.5...v8.1.6)
- bug #65735 Avoid failing when PersistentRememberMeHandler handles a malformed cookie (@Seldaek)
- bug #65734 Reject malformed login link parameters instead of throwing a TypeError (@davidszkiba, @nicolas-grekas)
- bug #65677 Reject OIDC discovery endpoints that downgrade to plain HTTP (@nicolas-grekas)
- bug #65685 Narrow the race that lets a login link exceed max_uses (@nicolas-grekas)
- bug #65655 Apply "signature_properties" when a remember-me token provider is used (@nicolas-grekas)
- minor #65657 Clarify AuthenticatorManager constructor docblock for deprecated eraseCredentials argument (@webdevsamran)
Contributors
Seldaek, nicolas-grekas, and 2 other contributors