From 56484e30e3cc9c9301684c46f2a124109874c2a4 Mon Sep 17 00:00:00 2001
From: Dirk Wetter <dirk@testssl.sh>
Date: Sun, 12 Jul 2026 17:08:17 +0200
Subject: [PATCH 1/3] precision rules, especially when security bug is fixed

---
 CHANGELOG.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 855842b..ced3d82 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,9 +1,9 @@
 
 ## Change Log
 
-### Security fixes in 3.2.x
+### Security fixes in 3.2
 
-* Security fix: HTML-escape URLs in the HTML report to prevent stored XSS from a server-controlled `Location:` header (#3090)
+* (3.2.4): HTML-escape URLs in the HTML report to prevent stored XSS from a server-controlled "Location:" header (#3090)
 
 ### Features implemented / improvements in 3.2
 

From e3c3f9e89ce72dc0f7758ce90c0e027feacf850e Mon Sep 17 00:00:00 2001
From: Dirk Wetter <dirk@testssl.sh>
Date: Sun, 12 Jul 2026 17:09:50 +0200
Subject: [PATCH 2/3] order by last name

---
 CREDITS.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/CREDITS.md b/CREDITS.md
index 6ac1b0e..d89b0e3 100644
--- a/CREDITS.md
+++ b/CREDITS.md
@@ -68,9 +68,6 @@ Full contribution, see git log.
 * Christian Dresen
    - Dockerfile
 
-* Eric Gu
-  - HTML report XSS fix (escape server-controlled URLs, #3090)
-
 * enxio
    - support for TN3270/telnet STARTTLS
 
@@ -87,6 +84,9 @@ Full contribution, see git log.
   - bugfixes
   - former ARM binary support
 
+* Eric Gu
+  - HTML report XSS fix: escape server-controlled URLs
+
 * Jauder Ho
   - GH Action to build new container images upon push
   - dependabot actions

From 1e3c726af7b3cb347e686984f1a27668efea70ad Mon Sep 17 00:00:00 2001
From: Dirk Wetter <dirk@testssl.sh>
Date: Sun, 12 Jul 2026 17:12:16 +0200
Subject: [PATCH 3/3] Bump version

---
 testssl.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/testssl.sh b/testssl.sh
index eab9719..98c0eaf 100755
--- a/testssl.sh
+++ b/testssl.sh
@@ -122,7 +122,7 @@ trap "child_error" USR1
 
 ########### Internal definitions
 #
-declare -r VERSION="3.2.3"
+declare -r VERSION="3.2.4"
 declare -r SWCONTACT="dirk aet testssl dot sh"
 [[ "$VERSION" =~ dev|rc|beta ]] && \
      SWURL="https://testssl.sh/dev/" ||