openstack
/
octavia
Code Issues Proposed changes

Merge "Correct format of release note" into stable/ussuri

This commit is contained in:
Zuul 2022-07-11 11:28:11 +00:00 committed by Gerrit Code Review
parent bb0f448dad ca6582f6aa
commit b809e928ba
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
releasenotes/notes/fixed-API-validation-for-L7-rules-and-session-cookies-cb88f3f1b90171f9.yaml
View File

@ -3,7 +3,7 @@ fixes:
- |
Fixed validations in L7 rule and session cookie APIs in order to prevent
authenticated and authorized users to inject code into HAProxy
configuration. CR and LF (\r and \n) are no longer allowed in L7 rule
keys and values. The session persistence cookie names must follow the rules
configuration. CR and LF (\\r and \\n) are no longer allowed in L7 rule
keys and values. The session persistence cookie names must follow the rules
described in
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie.