nocebo/diaspora
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

bump to 0.5.1.2

Browse source
This commit is contained in:
Jonne Haß 2015-07-02 11:09:05 +02:00
parent e92c8000ba
commit 8624ebb921
2 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
Changelog.md
View file

@ -1,3 +1,9 @@
# 0.5.1.2
diaspora\* versions prior 0.5.1.2 leaked potentially private profile data (namely the bio, birthday, gender and location fields) to
unauthorized users. While the frontend properly hid them, the backend missed a check to not include them in responses.
Thanks to @cmrd-senya for finding and reporting the issue.
# 0.5.1.1
Update rails to 4.2.2, rack to 1.6.2 and jquery-rails to 4.0.4. This fixes

2
config/defaults.yml
View file

@ -4,7 +4,7 @@
defaults:
version:
number: "0.5.1.1" # Do not touch unless doing a release, do not backport the version number that's in master
number: "0.5.1.2" # Do not touch unless doing a release, do not backport the version number that's in master
heroku: false
environment:
url: "http://localhost:3000/"