From 42fdee1ebe426b38d7f4043a97da898c810d0864 Mon Sep 17 00:00:00 2001 From: Andrey Borysenko Date: Wed, 7 Aug 2024 15:09:25 +0300 Subject: [PATCH] v3.0.1 update (#356) Signed-off-by: Andrey Borysenko --- CHANGELOG.md | 6 ++++++ appinfo/info.xml | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index fd5a53c2..10d70505 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](http://keepachangelog.com/) and this project adheres to [Semantic Versioning](http://semver.org/). +## [3.0.1 - 2024-08-07] + +### Fixed + +- ExAppProxy: do not forward untrusted headers to ExApp. #354 + ## [3.0.0 - 2024-08-05] **Breaking change**: new mandatory (if ExAppProxy is used) ExApp routes declaration to register ExApp routes allowed to be called from Nextcloud or other origins. diff --git a/appinfo/info.xml b/appinfo/info.xml index c8a43a36..71a66cdf 100644 --- a/appinfo/info.xml +++ b/appinfo/info.xml @@ -43,7 +43,7 @@ to join us in shaping a more versatile, stable, and secure app landscape. *Your insights, suggestions, and contributions are invaluable to us.* ]]> - 3.0.0 + 3.0.1 agpl Andrey Borysenko Alexander Piskun