Passman 2.6.5
MD5: 35b01e7de864eecb31ae75deff9cb0a9
SHA256: 94c2ba43ff217f404073d650e206775319386aa041dca83bf7f5e2822c034d82
SHA512: e8976495369a10aca980d7552626b02b97ba5adf6640d4897ed60a129c88a39c538f057e5f4d8850fb949dc5112a8ad4cbf439b4f34983059855b7d928afb046
What's Changed
- Security and authorization hardening by @binsky08 in #890
- file and revision deletion scoped to the owner
- icon fetching hardened against SSRF
- expiry notification actions restricted to the owner
- vault deletion requests can only be cancelled by the requester or an admin
- XSS in the admin deletion request list fixed
- HTML injection via shared credential descriptions fixed
- outdated person-generator endpoint removed
- fixed the revision delete route param binding
- Refactor share request grouping and clean up obsolete MySQL settings by @binsky08 in #891
- Fix empty share request popup in vaults created after a share was made by @binsky08 in #892
- Fix crash when credentials contain non-Latin1 characters like € by @binsky08 in #889
Full Changelog: 2.6.4...2.6.5