Skip to content

v0.4.2
Compare
Choose a tag to compare
@spohlenz spohlenz released this 10 May 11:13
v0.4.2
9e87348

This release fixes a Cross-Site Request Forgery issue that is present in trestle-auth versions 0.4.0 and 0.4.1.
See GHSA-h8hx-2c5r-32cf for more information.

  • Ensure CSRF protection is prepended before authentication before_actions (addresses CVE-2021-29435)
  • Fix install generator on older Ruby versions (< 2.6) [#31]
Assets 2
Loading