Stable v2.10.85
Features
- Add ClouDNS Sync extension
Improvements
- Suppress gosec G101 false positive on password mask constant
- Mask password-type settings in admin settings API
- Record HandleHook audit for the 6 remaining extensions
- Add X-Enconf-Hook-Secret guard to hook endpoint
- Add X-Enconf-Hook-Secret guard to HandleHook
- Add X-Enconf-Hook-Secret guard to HandleHook
- Add X-Enconf-Hook-Secret guard to HandleHook
- Add X-Enconf-Hook-Secret guard to HandleHook
- Add X-Enconf-Hook-Secret guard to HandleHook
- Close Connection-header smuggling bypass of hook guard
- Close predictable crypto key and cross-tenant hook bypass