diff options
Diffstat (limited to 'changelog.d')
| -rw-r--r-- | changelog.d/c2s-update-verify.fix | 1 | ||||
| -rw-r--r-- | changelog.d/ensure-authorized-fetch.security | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/changelog.d/c2s-update-verify.fix b/changelog.d/c2s-update-verify.fix new file mode 100644 index 000000000..a4dfe7c07 --- /dev/null +++ b/changelog.d/c2s-update-verify.fix @@ -0,0 +1 @@ +Verify a local Update sent through AP C2S so users can only update their own objects diff --git a/changelog.d/ensure-authorized-fetch.security b/changelog.d/ensure-authorized-fetch.security new file mode 100644 index 000000000..200abdae0 --- /dev/null +++ b/changelog.d/ensure-authorized-fetch.security @@ -0,0 +1 @@ +Require HTTP signatures (if enabled) for routes used by both C2S and S2S AP API
\ No newline at end of file |