YOURLS - Package Updates
-
[1.12.1]
- Update YOURLS to 1.10.4
- Full Changelog
- fixed: Prevent XSS in stat pages through referrers (#4107)
- added: Localization support for date and time display (#4054)
- improved: Improve shunt filters (#4058)
- fixed: Notice overlapping logo in admin panel (#4069)
- fixed: Flag password file as user auth from environment variables (#4066)
- added: Filter SQL queries (#4064)
- improved: Improve debug functions and logic (#4089)
- improved: Make tests debugging easier (#4104)
-
[1.12.2]
- Update YOURLS to 1.10.5
- Full Changelog
- fixed and improved: numerous misc security hardenings (#4111, #4122, #4119, #4139, #4141, #4145, #4147, #4142)
md5now phased out- extensive use of
hash_equals()to beat time based attacks - implementation of cookie prefixes
YOURLS_COOKIEKEYnow unpredictable when not user defined- remote title fetching restricted on a public install when shortening private IP
- prevent unauthenticated file inclusion in Pages under very unlikely conditions
- better support for proxies
- improved: unit tests, to handle more scenarios and make tests independent of constants, to eventually deprecate some constants (#4124)
- changed: Return
HTTP 409 Conflictinstead of400when a duplicate long URL is rejected (#4133)
-
[1.12.3]
- Update YOURLS to 1.10.6
- Full Changelog
- fixed: the version number. It's just
1.10.5, without the-dev, as1.10.5should have been. Sorry
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login