add CVE for fixed csrf attacks

This commit is contained in:
Uwe Steinmann 2021-04-05 10:23:58 +02:00
parent 23c9edd5a4
commit 34b1574cc1

View File

@ -6,6 +6,7 @@
- fix potential clickjacking attack with manipulated email address of a user - fix potential clickjacking attack with manipulated email address of a user
- loading more items on ViewFolder page obeys sort order - loading more items on ViewFolder page obeys sort order
- fix possible csrf attacks due to missing form token - fix possible csrf attacks due to missing form token
(CVE-202126215, CVE-202126216)
- show an error msg on the documents detail page if the checksum of version - show an error msg on the documents detail page if the checksum of version
mismatch mismatch
- overhaul notifications, type of receiver is now passed to notification - overhaul notifications, type of receiver is now passed to notification