mirror of
https://github.com/status-im/consul.git
synced 2025-01-09 05:23:04 +00:00
3 lines
378 B
Plaintext
3 lines
378 B
Plaintext
```release-note:security
|
|
auto-config: Added input validation for auto-config JWT authorization checks. Prior to this change, it was possible for malicious actors to construct requests which incorrectly pass custom JWT claim validation for the `AutoConfig.InitialConfiguration` endpoint. Now, only a subset of characters are allowed for the input before evaluating the bexpr.
|
|
``` |