Skip to content

Commit 97f7279

Browse files
committed
Update v8_09.md
1 parent 2706ed6 commit 97f7279

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

MyApp/_pages/releases/v8_09.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3141,7 +3141,8 @@ customizations see the [API Explorer Docs](https://docs.servicestack.net/api-exp
31413141

31423142
## XSS Vulnerability fixed in HtmlFormat.html
31433143

3144-
Late in this release cycle a Customer has reported a DOM XSS vulnerability in ServiceStack's built-in HtmlFormat.html page which has been fixed in [this commit](https://github.com/ServiceStack/ServiceStack/commit/76df4609410f7b440c3fb153371a1d29b9c06ac0) and available from this ServiceStack v8.9+ release.
3144+
Late in this release cycle a Customer has reported a DOM XSS vulnerability in ServiceStack's built-in
3145+
[Auto HTML API](/auto-html-api) page that has been fixed in [this commit](https://github.com/ServiceStack/ServiceStack/commit/76df4609410f7b440c3fb153371a1d29b9c06ac0) and available from this ServiceStack v8.9+ release.
31453146

31463147
Alternatively it can also be prevented by rejecting requests with `"` in its path:
31473148

@@ -3166,4 +3167,4 @@ SetConfig(new HostConfig {
31663167
})
31673168
```
31683169

3169-
To improve visibility of future security issues we've created a [Security Vulnerabilities Watchlist](https://github.com/ServiceStack/Discuss/discussions/150), please follow this thread to get notified of any updates.
3170+
To improve visibility of future security issues we've also created a [Security Vulnerabilities Watchlist](https://github.com/ServiceStack/Discuss/discussions/150), please follow this thread to get notified of any updates.

0 commit comments

Comments
 (0)