Zum Inhalt

Stable v2.10.85

Features

  • Add ClouDNS Sync extension

Improvements

  • Suppress gosec G101 false positive on password mask constant
  • Mask password-type settings in admin settings API
  • Record HandleHook audit for the 6 remaining extensions
  • Add X-Enconf-Hook-Secret guard to hook endpoint
  • Add X-Enconf-Hook-Secret guard to HandleHook
  • Add X-Enconf-Hook-Secret guard to HandleHook
  • Add X-Enconf-Hook-Secret guard to HandleHook
  • Add X-Enconf-Hook-Secret guard to HandleHook
  • Add X-Enconf-Hook-Secret guard to HandleHook
  • Close Connection-header smuggling bypass of hook guard
  • Close predictable crypto key and cross-tenant hook bypass