2022-05-11 23:43:23 +02:00
|
|
|
Version 1.5.1
|
|
|
|
-------------
|
|
|
|
* The ``HOST_OVERRIDE`` environment variable can be used to override the base URL. Useful when behind a reverseproxy.
|
|
|
|
* Upgrade to Jinja 2.11.3
|
|
|
|
* Upgrade to cryptography 3.3.2
|
|
|
|
* Returning json if request-mimetype is "application/json"
|
|
|
|
* Return template if password is expired (instead of 404)
|
|
|
|
|
2020-09-15 18:22:49 +02:00
|
|
|
Version 1.5.0
|
|
|
|
-------------
|
|
|
|
* Added support for "2 week" secret lifetimes.
|
|
|
|
* The ``NO_SSL`` environment variable is now propertly parsed.
|
2019-08-09 23:40:07 +02:00
|
|
|
* The ``URL_PREFIX`` environment variable can be used to add a prefix to URLs,
|
|
|
|
which is useful when running behind a reverse proxy like nginx.
|
2020-09-15 18:22:49 +02:00
|
|
|
* Prevent prefetching bots from destroying secrets.
|
2019-08-09 23:40:07 +02:00
|
|
|
* Replaced mockredis with fakeredis in the unit test environment.
|
2019-11-25 17:58:29 +01:00
|
|
|
* Added support for Python 3.8.
|
2019-08-09 23:40:07 +02:00
|
|
|
|
2019-06-02 21:37:08 +02:00
|
|
|
Version 1.4.2
|
|
|
|
-------------
|
|
|
|
* Various minor README and documentation improvements
|
|
|
|
* Upgrade to Jinja 2.10.1
|
|
|
|
* Fix autocomplete bug where hitting "back" would allow to autocomplete the password
|
|
|
|
|
2018-10-31 17:35:44 +01:00
|
|
|
Version 1.4.1
|
|
|
|
-------------
|
2018-10-31 23:49:25 +01:00
|
|
|
* Switch to local (non-CDN) Font Awesome assets
|
2018-10-31 17:35:44 +01:00
|
|
|
* Upgraded cryptography to 2.3.1 (for CVE-2018-10903, although snappass is
|
|
|
|
unaffected because it doesn't use the vulnerable ``finalize_with_tag`` API)
|
|
|
|
|
2018-07-03 17:30:22 +02:00
|
|
|
Version 1.4.0
|
|
|
|
-------------
|
|
|
|
*You will lose stored passwords during the upgrade to this version*
|
|
|
|
* Added a prefix in redis in front of the storage keys, making the redis safer to share with other applications
|
|
|
|
* Small test and syntax improvements
|
|
|
|
|
2018-05-07 18:23:51 +02:00
|
|
|
Version 1.3.0
|
|
|
|
-------------
|
|
|
|
* Quote urls to fix bug with ending in '='
|
|
|
|
* Mock redis
|
|
|
|
* Drop support for python 2.6 and python 3.3
|
|
|
|
|
2017-05-16 19:34:37 +02:00
|
|
|
Version 1.2.0
|
|
|
|
-------------
|
|
|
|
* Added Fernet cryptography to the stored keys, prevent access to full text passwords if someone has access to Redis
|