[interchange/STABLE_5_6-branch] Update WHATSNEW in preparation for release
David Christensen <[email protected]>
| Newsgroups | gmane.comp.web.interchange.cvs |
|---|---|
| Message-ID | <[email protected]> |
commit 01590f15d0a648e05bcb123fe3464648a62d1086 Author: David Christensen <[email protected]> Date: Tue Mar 23 23:04:02 2010 -0500 Update WHATSNEW in preparation for release WHATSNEW-5.6 | 30 ++++++++++++++++++++++++++++++ 1 files changed, 30 insertions(+), 0 deletions(-) --- diff --git a/WHATSNEW-5.6 b/WHATSNEW-5.6 index d9e1d35..3ab13d6 100644 --- a/WHATSNEW-5.6 +++ b/WHATSNEW-5.6 @@ -8,6 +8,36 @@ See UPGRADE document for a list of incompatible changes. +Interchange 5.6.3 released 2010-03-23. + + +Core +---- + +* Fix a "HTTP Response Splitting" security exploit. This is not known + to be exploitable in the standard demo, but could potentially affect + other pages in rare circumstances. + +* Fix a bug in initialization of Vend::Payment::BusinessOnlinePayment + supplemental parameters. + +* Fix a bug in css.tag to properly output the css when using the + inline <style> block. + +* Fix a bug which could in some cases return malformed responses when + a default charset was not defined. In particular, this is known to + have affected Internet Explorer when utilizing an IC-generated AJAX + response. + +Standard demo +------------- + +* Change [forum] tag to default to NoReparse. + + + +------------------------------------------------------------------------------ + Interchange 5.6.2 released 2009-09-17.