Documented security fix in changelog

This commit is contained in:
Armin Ronacher 2010-12-23 14:18:14 +01:00
parent ed70b42798
commit b92120b190

View file

@ -40,6 +40,9 @@ Bugfix release, release date to be announced.
module setups.
- Fixed an issue where the subdomain setting for modules was
ignored for the static folder.
- Fixed a security problem that allowed clients to download arbitrary files
if the host server was a windows based operating system and the client
uses backslashes to escape the directory the files where exposed from.
Version 0.6
-----------