openstack/octavia
Code Issues Proposed changes

Correct format of release note

Browse Source 
Change-Id: Ief3d64a3b290676b121a2dcca0760ef2d91ce817
(cherry picked from commit 1184b85a0a)
(cherry picked from commit ef4ef0427b)
This commit is contained in:
Tom Weininger 2022-06-20 14:40:49 +02:00
parent c30aa9df22
commit 7f960f0e18
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
releasenotes/notes/fixed-API-validation-for-L7-rules-and-session-cookies-cb88f3f1b90171f9.yaml
View File

@ -3,7 +3,7 @@ fixes:
- |
Fixed validations in L7 rule and session cookie APIs in order to prevent
authenticated and authorized users to inject code into HAProxy
configuration. CR and LF (\r and \n) are no longer allowed in L7 rule
keys and values. The session persistence cookie names must follow the rules
configuration. CR and LF (\\r and \\n) are no longer allowed in L7 rule
keys and values. The session persistence cookie names must follow the rules
described in
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie.