mirror of
https://github.com/drwetter/testssl.sh.git
synced 2026-07-14 02:57:39 +02:00
+2
-2
@@ -1,9 +1,9 @@
|
||||
|
||||
## Change Log
|
||||
|
||||
### Security fixes in 3.2.x
|
||||
### Security fixes in 3.2
|
||||
|
||||
* Security fix: HTML-escape URLs in the HTML report to prevent stored XSS from a server-controlled `Location:` header (#3090)
|
||||
* (3.2.4): HTML-escape URLs in the HTML report to prevent stored XSS from a server-controlled "Location:" header (#3090)
|
||||
|
||||
### Features implemented / improvements in 3.2
|
||||
|
||||
|
||||
+3
-3
@@ -68,9 +68,6 @@ Full contribution, see git log.
|
||||
* Christian Dresen
|
||||
- Dockerfile
|
||||
|
||||
* Eric Gu
|
||||
- HTML report XSS fix (escape server-controlled URLs, #3090)
|
||||
|
||||
* enxio
|
||||
- support for TN3270/telnet STARTTLS
|
||||
|
||||
@@ -87,6 +84,9 @@ Full contribution, see git log.
|
||||
- bugfixes
|
||||
- former ARM binary support
|
||||
|
||||
* Eric Gu
|
||||
- HTML report XSS fix: escape server-controlled URLs
|
||||
|
||||
* Jauder Ho
|
||||
- GH Action to build new container images upon push
|
||||
- dependabot actions
|
||||
|
||||
+1
-1
@@ -122,7 +122,7 @@ trap "child_error" USR1
|
||||
|
||||
########### Internal definitions
|
||||
#
|
||||
declare -r VERSION="3.2.3"
|
||||
declare -r VERSION="3.2.4"
|
||||
declare -r SWCONTACT="dirk aet testssl dot sh"
|
||||
[[ "$VERSION" =~ dev|rc|beta ]] && \
|
||||
SWURL="https://testssl.sh/dev/" ||
|
||||
|
||||
Reference in New Issue
Block a user