openstack
/
octavia
Code Issues Proposed changes

Merge "Correct format of release note" into stable/yoga

This commit is contained in:
Zuul 2022-07-11 11:23:42 +00:00 committed by Gerrit Code Review
parent b7d792b5bf ef4ef0427b
commit 6022d646b5
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
releasenotes/notes/fixed-API-validation-for-L7-rules-and-session-cookies-cb88f3f1b90171f9.yaml
View File

@ -3,7 +3,7 @@ fixes:
- |
Fixed validations in L7 rule and session cookie APIs in order to prevent
authenticated and authorized users to inject code into HAProxy
configuration. CR and LF (\r and \n) are no longer allowed in L7 rule
keys and values. The session persistence cookie names must follow the rules
configuration. CR and LF (\\r and \\n) are no longer allowed in L7 rule
keys and values. The session persistence cookie names must follow the rules
described in
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie.