diff options
| author | Michael Koziarski <michael@koziarski.com> | 2007-10-02 05:58:16 +0000 |
|---|---|---|
| committer | Michael Koziarski <michael@koziarski.com> | 2007-10-02 05:58:16 +0000 |
| commit | eb5033ad6b4a12a32e1493fb5b9aeee9eb75f10e (patch) | |
| tree | 8fa0bbf1a55796d46829ba5eebc366ada232aee6 /actionpack/CHANGELOG | |
| parent | 0ee1cb2cd32bfaf47deaf5440dd5b9cf0915ab6a (diff) | |
| download | rails-eb5033ad6b4a12a32e1493fb5b9aeee9eb75f10e.tar.gz rails-eb5033ad6b4a12a32e1493fb5b9aeee9eb75f10e.tar.bz2 rails-eb5033ad6b4a12a32e1493fb5b9aeee9eb75f10e.zip | |
Merge session fixation fixes from stable
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7722 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
Diffstat (limited to 'actionpack/CHANGELOG')
| -rw-r--r-- | actionpack/CHANGELOG | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/actionpack/CHANGELOG b/actionpack/CHANGELOG index 6816d18261..134ad1f898 100644 --- a/actionpack/CHANGELOG +++ b/actionpack/CHANGELOG @@ -1,3 +1,7 @@ +*SVN* + +* Only accept session ids from cookies, prevents session fixation attacks. [bradediger] + *2.0.0 [Preview Release]* (September 29th, 2007) [Includes duplicates of changes from 1.12.2 - 1.13.3] * Fixed that render template did not honor exempt_from_layout #9698 [pezra] |