mirror of
https://github.com/onionshare/onionshare.git
synced 2025-01-11 15:29:38 -05:00
added 0.5 to changelog
This commit is contained in:
parent
b946c2f20a
commit
ee560e2d05
10
CHANGELOG.md
10
CHANGELOG.md
@ -1,9 +1,15 @@
|
|||||||
# OnionShare Changelog
|
# OnionShare Changelog
|
||||||
|
|
||||||
|
## 0.5
|
||||||
|
|
||||||
|
* Removed webkit GUI altogether, and refactored GUI with native Qt widget
|
||||||
|
* In Tails, launches separate process as root for Tor control port and firewall stuff, everything else runs as amnesia
|
||||||
|
* Fixed itsdangerous dependency bug in Debian Wheezy and Tails
|
||||||
|
* Guesses content type of file, responds in HTTP header
|
||||||
|
|
||||||
## 0.4
|
## 0.4
|
||||||
|
|
||||||
* Fixed critical XSS bug that could deanonymize user
|
* Fixed critical XSS bug that could deanonymize user: https://micahflee.com/2014/07/security-advisory-upgrade-to-onionshare-0-4-immediately/
|
||||||
https://micahflee.com/2014/07/security-advisory-upgrade-to-onionshare-0-4-immediately/
|
|
||||||
* Added CSP headers in GUI to prevent any future XSS bugs from working
|
* Added CSP headers in GUI to prevent any future XSS bugs from working
|
||||||
* Hash urandom data before using it, to avoid leaking state of entropy
|
* Hash urandom data before using it, to avoid leaking state of entropy
|
||||||
* Constant time compare the slug to avoid timing attacks
|
* Constant time compare the slug to avoid timing attacks
|
||||||
|
Loading…
Reference in New Issue
Block a user