EbookFoundation
/
readthedocs.org
mirror of https://github.com/EbookFoundation/readthedocs.org.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Use autosectionlabel for docs in security

master
Santos Gallegos 2019-02-18 14:47:31 -05:00
parent 39a0d5fb35
commit 5411a659cb
2 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
CHANGELOG.rst
View File

@ -986,14 +986,12 @@ Version 2.3.1
* `@humitos <http://github.com/humitos>`__: Upgrade all packages using `pur` tool (`#2916 <https://github.com/rtfd/readthedocs.org/pull/2916>`__)
* `@rixx <http://github.com/rixx>`__: Fix page redirect preview (`#2711 <https://github.com/rtfd/readthedocs.org/pull/2711>`__)
.. _version-2.3.0:
Version 2.3.0
-------------
.. warning::
Version 2.3.0 includes a security fix for project translations. See
:ref:`security-2.3.0` for more information
:ref:`security:Release 2.3.0` for more information
* `@stsewd <http://github.com/stsewd>`__: Fix tox env for coverage (`#3772 <https://github.com/rtfd/readthedocs.org/pull/3772>`__)
* `@humitos <http://github.com/humitos>`__: Try to fix end of file (`#3761 <https://github.com/rtfd/readthedocs.org/pull/3761>`__)

4
docs/security.rst
View File

@ -87,7 +87,7 @@ Security issue archive
Version 3.2.0
~~~~~~~~~~~~~
:ref:`version-3.2.0` resolved an issue where a specially crafted request
:ref:`changelog:Version 3.2.0` resolved an issue where a specially crafted request
could result in a DNS query to an arbitrary domain.
This issue was found by `Cyber Smart Defence <https://www.cybersmartdefence.com/>`_
@ -98,7 +98,7 @@ of Read the Docs.
Release 2.3.0
~~~~~~~~~~~~~
:ref:`version-2.3.0` resolves a security issue with translations on our community
:ref:`changelog:Version 2.3.0` resolves a security issue with translations on our community
hosting site that allowed users to modify the hosted path of a target project by
adding it as a translation project of their own project. A check was added to
ensure project ownership before adding the project as a translation.