Skip to content

Latest commit

 

History

History
49 lines (42 loc) · 1.77 KB

CHANGELOG.rst

File metadata and controls

49 lines (42 loc) · 1.77 KB
Raw

Version 1.6.0

  • Drop support for officially unsupported Python versions (< Python 3.7)

Version 1.5.1

  • The HOST_OVERRIDE environment variable can be used to override the base URL. Useful when behind a reverseproxy.
  • Upgrade to Jinja 2.11.3
  • Upgrade to cryptography 3.3.2
  • Returning json if request-mimetype is "application/json"
  • Return template if password is expired (instead of 404)

Version 1.5.0

  • Added support for "2 week" secret lifetimes.
  • The NO_SSL environment variable is now propertly parsed.
  • The URL_PREFIX environment variable can be used to add a prefix to URLs, which is useful when running behind a reverse proxy like nginx.
  • Prevent prefetching bots from destroying secrets.
  • Replaced mockredis with fakeredis in the unit test environment.
  • Added support for Python 3.8.

Version 1.4.2

  • Various minor README and documentation improvements
  • Upgrade to Jinja 2.10.1
  • Fix autocomplete bug where hitting "back" would allow to autocomplete the password

Version 1.4.1

  • Switch to local (non-CDN) Font Awesome assets
  • Upgraded cryptography to 2.3.1 (for CVE-2018-10903, although snappass is unaffected because it doesn't use the vulnerable finalize_with_tag API)

Version 1.4.0

You will lose stored passwords during the upgrade to this version
  • Added a prefix in redis in front of the storage keys, making the redis safer to share with other applications
  • Small test and syntax improvements

Version 1.3.0

  • Quote urls to fix bug with ending in '='
  • Mock redis
  • Drop support for python 2.6 and python 3.3

Version 1.2.0

  • Added Fernet cryptography to the stored keys, prevent access to full text passwords if someone has access to Redis