added 0.5 to changelog

This commit is contained in:
Micah Lee 2014-08-20 17:51:03 -07:00
parent b946c2f20a
commit ee560e2d05

View File

@ -1,9 +1,15 @@
# OnionShare Changelog # OnionShare Changelog
## 0.5
* Removed webkit GUI altogether, and refactored GUI with native Qt widget
* In Tails, launches separate process as root for Tor control port and firewall stuff, everything else runs as amnesia
* Fixed itsdangerous dependency bug in Debian Wheezy and Tails
* Guesses content type of file, responds in HTTP header
## 0.4 ## 0.4
* Fixed critical XSS bug that could deanonymize user * Fixed critical XSS bug that could deanonymize user: https://micahflee.com/2014/07/security-advisory-upgrade-to-onionshare-0-4-immediately/
https://micahflee.com/2014/07/security-advisory-upgrade-to-onionshare-0-4-immediately/
* Added CSP headers in GUI to prevent any future XSS bugs from working * Added CSP headers in GUI to prevent any future XSS bugs from working
* Hash urandom data before using it, to avoid leaking state of entropy * Hash urandom data before using it, to avoid leaking state of entropy
* Constant time compare the slug to avoid timing attacks * Constant time compare the slug to avoid timing attacks