Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Column
width95%

What's New in this Release


Anchor
Blacklist_optn
Blacklist_optn
Added Blacklist domains option

Users can now blacklist private networks, hosts or subnets to avoid Server Side Request Forgeries (SSRF) through the Blacklist domains configuration (insert link to admin guide here) option. By default, this option is disabled. If enabled, users can view a list of sites that are commonly blacklisted. If a request from any of these sites is received after enabling the option, the user is prompted to contact the System Administrator for further processing, or, an error message is displayed.

To view the default list of sites that can be blacklisted, click the link named "listed". A pop-up with the most commonly blacklisted sites appears as shown:

Anchor
Enhanced_XSS_security
Enhanced_XSS_security
Enhanced security against XSS vulnerabilities

This app version now has enhanced security implemented to handle any cross-site scripting from the macros.



Div
stylepadding-top:15px;

Release Highlights



Section


Page Properties
hiddentrue
idrelease_details


Release Date

Status
colourYellow
titlePENDING

Version5.6
Purpose
  • Fixes





Anchor
Fixes
Fixes
Resolved Issues

Jira Legacy
serverSystem JIRA
columnstype,key,summary,reporter,priority,status,resolution
maximumIssues20
jqlQuery(project = HTML AND fixVersion = "5.6.0") ORDER BY priority DESC
serverId729d679a-302c-339f-958b-015e107badcd