Merge pull request #3094 from testssl/ready_for_3.2.4

Ready for 3.2.4

CHANGELOG.md

@@ -1,9 +1,9 @@
 
 ## Change Log
 
-### Security fixes in 3.2.x
+### Security fixes in 3.2
 
-* Security fix: HTML-escape URLs in the HTML report to prevent stored XSS from a server-controlled `Location:` header (#3090)
+* (3.2.4): HTML-escape URLs in the HTML report to prevent stored XSS from a server-controlled "Location:" header (#3090)
 
 ### Features implemented / improvements in 3.2
 

CREDITS.md

@@ -68,9 +68,6 @@ Full contribution, see git log.
 * Christian Dresen
    - Dockerfile
 
-* Eric Gu
-  - HTML report XSS fix (escape server-controlled URLs, #3090)
-
 * enxio
    - support for TN3270/telnet STARTTLS
 
@@ -87,6 +84,9 @@ Full contribution, see git log.
   - bugfixes
   - former ARM binary support
 
+* Eric Gu
+  - HTML report XSS fix: escape server-controlled URLs
+
 * Jauder Ho
   - GH Action to build new container images upon push
   - dependabot actions

testssl.sh

@@ -122,7 +122,7 @@ trap "child_error" USR1
 
 ########### Internal definitions
 #
-declare -r VERSION="3.2.3"
+declare -r VERSION="3.2.4"
 declare -r SWCONTACT="dirk aet testssl dot sh"
 [[ "$VERSION" =~ dev|rc|beta ]] && \
      SWURL="https://testssl.sh/dev/" ||