openstack/octavia
Code Issues Proposed changes

Correct format of release note

Browse Source 
Change-Id: Ief3d64a3b290676b121a2dcca0760ef2d91ce817
(cherry picked from commit 1184b85a0a)
This commit is contained in:
Tom Weininger 2022-06-20 14:40:49 +02:00
parent 133ec4763d
commit ef4ef0427b
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
releasenotes/notes/fixed-API-validation-for-L7-rules-and-session-cookies-cb88f3f1b90171f9.yaml
View File

@ -3,7 +3,7 @@ fixes:
- |
Fixed validations in L7 rule and session cookie APIs in order to prevent
authenticated and authorized users to inject code into HAProxy
configuration. CR and LF (\r and \n) are no longer allowed in L7 rule
keys and values. The session persistence cookie names must follow the rules
configuration. CR and LF (\\r and \\n) are no longer allowed in L7 rule
keys and values. The session persistence cookie names must follow the rules
described in
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie.