Do not HTML escape stuff we just got from the user before writing it to LDAP,

[mirror/userdir-ldap-cgi.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index e43a4dc..a88baf7 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,17 @@
+userdir-ldap-cgi (0.3.19) unstable; urgency=low
+
+  * Do not HTML escape stuff we just got from the user before
+    writing it to LDAP, set it as passwords, etc.  Instead
+    escape stuff we did read from LDAP.
+
+ -- Peter Palfrader <weasel@debian.org>  Tue, 16 Sep 2008 16:21:32 +0200
+
 userdir-ldap-cgi (0.3.18) unstable; urgency=low
 
   * Add password checking via a python wrapper.
+  * Add myself to uploaders.
 
- -- Peter Palfrader <weasel@debian.org>  Mon, 15 Sep 2008 14:25:44 +0200
+ -- Peter Palfrader <weasel@debian.org>  Mon, 15 Sep 2008 14:25:51 +0200
 
 userdir-ldap-cgi (0.3.17) unstable; urgency=low