diff options
| author |  Alexandre Alapetite <alexandre@alapetite.fr>
| 2016-08-13 19:18:17 +0200 |
|---|---|---|
| committer | Alexandre Alapetite <alexandre@alapetite.fr>
| 2016-08-13 19:18:17 +0200 |
| commit | b3963f6ed6316745593da8a68116006a179a817e (patch) | |
| tree | 36fea769271878d2ad9927a26cb25aa53a799207 | |
| parent | 56ffc115d15bf136bfced74707ccc1f41c7b5e44 (diff) | |
README: Add CSRF tokens
https://github.com/FreshRSS/FreshRSS/issues/570
https://github.com/FreshRSS/FreshRSS/issues/955
https://github.com/FreshRSS/FreshRSS/pull/1198
| -rw-r--r-- | CHANGELOG.md | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 91bc0e525..7d0c583a6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -12,7 +12,8 @@ * FreshRSS will automatically migrate MySQL tables to utf8mb4 the first time it is needed. * Security * Remove Mozilla Persona login (the service closes on 2016-11-30) [#1052](https://github.com/FreshRSS/FreshRSS/issues/1052) - * Use Referrer Policy `<meta name="referrer" content="origin" />` for limiting HTTP Referer [#1198](https://github.com/FreshRSS/FreshRSS/pull/1198) + * Use Referrer Policy `<meta name="referrer" content="never" />` for stopping HTTP Referer [#955](https://github.com/FreshRSS/FreshRSS/issues/955) + * Implement CSRF tokens for POST security [#570](https://github.com/FreshRSS/FreshRSS/issues/570) * Bug fixing * Fixed scroll in log view [#1178](https://github.com/FreshRSS/FreshRSS/issues/1178) * Fixed JavaScript bug when articles were not always marked as read [#1123](https://github.com/FreshRSS/FreshRSS/issues/1123) |