Do not HTML escape stuff we just got from the user before writing it to LDAP,

[mirror/userdir-ldap-cgi.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 513a5d6..a88baf7 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,18 @@
+userdir-ldap-cgi (0.3.19) unstable; urgency=low
+
+  * Do not HTML escape stuff we just got from the user before
+    writing it to LDAP, set it as passwords, etc.  Instead
+    escape stuff we did read from LDAP.
+
+ -- Peter Palfrader <weasel@debian.org>  Tue, 16 Sep 2008 16:21:32 +0200
+
+userdir-ldap-cgi (0.3.18) unstable; urgency=low
+
+  * Add password checking via a python wrapper.
+  * Add myself to uploaders.
+
+ -- Peter Palfrader <weasel@debian.org>  Mon, 15 Sep 2008 14:25:51 +0200
+
 userdir-ldap-cgi (0.3.17) unstable; urgency=low
 
   * Comment out uuid - nobody will get it's just an identifier.