Update of /cvsroot/mailman/mailman
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv10081
Modified Files:
Tag: Release_2_1-maint
NEWS
Log Message:
News about XSS closure.
Index: NEWS
===================================================================
RCS file: /cvsroot/mailman/mailman/NEWS,v
retrieving revision 2.43.2.32
retrieving revision 2.43.2.33
diff -u -d -r2.43.2.32 -r2.43.2.33
--- NEWS 19 Dec 2004 06:19:03 -0000 2.43.2.32
+++ NEWS 28 Dec 2004 00:38:44 -0000 2.43.2.33
@@ -6,24 +6,29 @@
2.1.6 (XX-XXX-200X)
+ - A potential cross-site scripting hole in the driver script has been
+ closed. Thanks to Florian Weimer for its discovery. Also, turn
+ STEALTH_MODE on by default.
+
- Chinese languages moved from 'big5' and 'gb' to 'zh_TW' and 'zh_CN'
respectively for compliance to the IANA spec. Note that the both
languages are not supported yet.
- - Python 2.4 compatibility issue: time.strftime() become strict about the
+ - Python 2.4 compatibility issue: time.strftime() became strict about the
'day of year' range. (1078482)
- - List owners can now set how many days to hold the messages in the
- moderator request queue. cron/checkdb will automatically discard old
- messages. (790494)
+ - New feature: automatic discards of held messages. List owners can now
+ set how many days to hold the messages in the moderator request queue.
+ cron/checkdb will automatically discard old messages. (790494)
- Improved mail address sanity check. (1030228)
- SpamDetect.py now checks attachment header. (1026977)
- - subject_prefix can be configured to include a sequence number which is
- taken from the post_id variable. Also, the prefix is always put at the
- start of the subject, i.e. "[list-name] Re: original subject"
+ - New feature: subject_prefix can be configured to include a sequence
+ number which is taken from the post_id variable. Also, the prefix is
+ always put at the start of the subject, i.e. "[list-name] Re: original
+ subject"
- List owners can now use Scrubber to get the attachments scrubbed (held
in the web archive), if the site admin permits it in mm_cfg.py. New
_______________________________________________
Mailman-checkins mailing list
[email protected]
Unsubscribe:
http://mail.python.org/mailman/options/mailman-checkins/archive%40jab.org
