openstack/octavia
Code Issues Proposed changes

Correct format of release note

Browse Source 
Change-Id: Ief3d64a3b290676b121a2dcca0760ef2d91ce817
This commit is contained in:
Tom Weininger 2022-06-20 14:40:49 +02:00
parent 3cf866dbc0
commit 1184b85a0a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
releasenotes/notes/fixed-API-validation-for-L7-rules-and-session-cookies-cb88f3f1b90171f9.yaml
View File

@ -3,7 +3,7 @@ fixes:
- |
Fixed validations in L7 rule and session cookie APIs in order to prevent
authenticated and authorized users to inject code into HAProxy
configuration. CR and LF (\r and \n) are no longer allowed in L7 rule
keys and values. The session persistence cookie names must follow the rules
configuration. CR and LF (\\r and \\n) are no longer allowed in L7 rule
keys and values. The session persistence cookie names must follow the rules
described in
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie.