summaryrefslogtreecommitdiffstats
path: root/CHANGES
diff options
context:
space:
mode:
authorGraham Leggett <minfrin@apache.org>2014-04-25 12:55:04 +0200
committerGraham Leggett <minfrin@apache.org>2014-04-25 12:55:04 +0200
commit7c05d5e069c1a068de67d99aa51cd6f4e3be8082 (patch)
treee1959ff704e0856e6d819281c90d7f286d88e666 /CHANGES
parentFollow-up to r1587607: (diff)
downloadapache2-7c05d5e069c1a068de67d99aa51cd6f4e3be8082.tar.xz
apache2-7c05d5e069c1a068de67d99aa51cd6f4e3be8082.zip
Add the ldap function to the expression API, allowing LDAP filters and
distinguished names based on expressions to be escaped correctly to guard against LDAP injection. Note: this requires at least APR v1.6.0 or above for the apr_escape API. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1589986 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES4
1 files changed, 4 insertions, 0 deletions
diff --git a/CHANGES b/CHANGES
index ff880bacc8..d7e90a06b7 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,10 @@
-*- coding: utf-8 -*-
Changes with Apache 2.5.0
+ *) Add the ldap function to the expression API, allowing LDAP filters and
+ distinguished names based on expressions to be escaped correctly to
+ guard against LDAP injection. [Graham Leggett]
+
*) Add module mod_ssl_ct, which provides an implementation of Certificate
Transparency (RFC 6962) for httpd. [Jeff Trawick]