diff options
| author | Sven-Hendrik Haase <svenstaro@gmail.com> | 2022-05-18 05:08:22 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-05-18 05:08:22 +0000 |
| commit | bb4afb2d10582d7b5d27e3e01d2f316ab3d31ffc (patch) | |
| tree | 02519193e2ab5e52ef24fbb530e08c188b502b66 /CHANGELOG.md | |
| parent | Merge pull request #801 from svenstaro/run-clippy-only-on-nightly (diff) | |
| parent | Fix security issue with --no-symlinks (diff) | |
| download | miniserve-bb4afb2d10582d7b5d27e3e01d2f316ab3d31ffc.tar.gz miniserve-bb4afb2d10582d7b5d27e3e01d2f316ab3d31ffc.zip | |
Merge pull request #802 from svenstaro/fix-symlink-following
Fix security issue with --no-symlinks
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 76928b6..7658b3b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/). <!-- next-header --> ## [Unreleased] - ReleaseDate +- Fix security issue where `--no-symlinks` would only hide symlinks from listing but it would + still be possible to follow them if the path was known ## [0.19.4] - 2022-04-02 - Fix random route leaking on error pages [#764](https://github.com/svenstaro/miniserve/pull/764) (thanks @steffhip) |