From 1e5c20c2d624f60e8ff72c0d34e9ecd35c4464fd Mon Sep 17 00:00:00 2001 From: Tom Weininger Date: Mon, 20 Jun 2022 14:40:49 +0200 Subject: [PATCH] Correct format of release note Change-Id: Ief3d64a3b290676b121a2dcca0760ef2d91ce817 (cherry picked from commit 1184b85a0a4e9d244870f34dd96315fe45d7cd2c) (cherry picked from commit ef4ef0427b720c87956bae081b89a84522c439d4) (cherry picked from commit 7f960f0e18cd2b9bfc9a1f4a7bf4b952580b118a) --- ...ion-for-L7-rules-and-session-cookies-cb88f3f1b90171f9.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/releasenotes/notes/fixed-API-validation-for-L7-rules-and-session-cookies-cb88f3f1b90171f9.yaml b/releasenotes/notes/fixed-API-validation-for-L7-rules-and-session-cookies-cb88f3f1b90171f9.yaml index 9a473553fb..c8801cec95 100644 --- a/releasenotes/notes/fixed-API-validation-for-L7-rules-and-session-cookies-cb88f3f1b90171f9.yaml +++ b/releasenotes/notes/fixed-API-validation-for-L7-rules-and-session-cookies-cb88f3f1b90171f9.yaml @@ -3,7 +3,7 @@ fixes: - | Fixed validations in L7 rule and session cookie APIs in order to prevent authenticated and authorized users to inject code into HAProxy - configuration. CR and LF (\r and \n) are no longer allowed in L7 rule - keys and values. The session persistence cookie names must follow the rules + configuration. CR and LF (\\r and \\n) are no longer allowed in L7 rule + keys and values. The session persistence cookie names must follow the rules described in https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie.