openstack/octavia
Code Issues Proposed changes

Correct format of release note

Browse Source 
Change-Id: Ief3d64a3b290676b121a2dcca0760ef2d91ce817
(cherry picked from commit 1184b85a0a)
(cherry picked from commit ef4ef0427b)
(cherry picked from commit 7f960f0e18)
This commit is contained in:
Tom Weininger
2022-06-20 14:40:49 +02:00
parent 6c52fd0e46
commit 1e5c20c2d6
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
releasenotes/notes/fixed-API-validation-for-L7-rules-and-session-cookies-cb88f3f1b90171f9.yaml
View File

@@ -3,7 +3,7 @@ fixes:
- | - |
Fixed validations in L7 rule and session cookie APIs in order to prevent Fixed validations in L7 rule and session cookie APIs in order to prevent
authenticated and authorized users to inject code into HAProxy authenticated and authorized users to inject code into HAProxy
configuration. CR and LF (\r and \n) are no longer allowed in L7 rule configuration. CR and LF (\\r and \\n) are no longer allowed in L7 rule
keys and values. The session persistence cookie names must follow the rules keys and values. The session persistence cookie names must follow the rules
described in described in
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie.