diff options
| author | Lain Soykaf <lain@lain.com> | 2025-03-11 17:57:45 +0400 |
|---|---|---|
| committer | Lain Soykaf <lain@lain.com> | 2025-03-11 17:57:45 +0400 |
| commit | 3c2b51c7cb249e7c0fc92023ac556d324ac3d774 (patch) | |
| tree | 72803ff539c4b6c3ef10fd76c50f6b14d956b714 /changelog.d/cross-domain-redirect-check.security | |
| parent | 2293d0826a9fb28e3e8a3d9bbf5dd60863ec0fd9 (diff) | |
| download | pleroma-3c2b51c7cb249e7c0fc92023ac556d324ac3d774.tar.gz pleroma-3c2b51c7cb249e7c0fc92023ac556d324ac3d774.zip | |
Changelog: Add missing changelog entries
Diffstat (limited to 'changelog.d/cross-domain-redirect-check.security')
| -rw-r--r-- | changelog.d/cross-domain-redirect-check.security | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/changelog.d/cross-domain-redirect-check.security b/changelog.d/cross-domain-redirect-check.security new file mode 100644 index 000000000..9201de794 --- /dev/null +++ b/changelog.d/cross-domain-redirect-check.security @@ -0,0 +1 @@ +Reject cross-domain redirects when fetching ActivityPub objects to prevent bypassing domain-based security controls.
\ No newline at end of file |