Do not HTML escape stuff we just got from the user before writing it to LDAP,

[mirror/userdir-ldap-cgi.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index be4c49e..a88baf7 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,31 @@
+userdir-ldap-cgi (0.3.19) unstable; urgency=low
+
+  * Do not HTML escape stuff we just got from the user before
+    writing it to LDAP, set it as passwords, etc.  Instead
+    escape stuff we did read from LDAP.
+
+ -- Peter Palfrader <weasel@debian.org>  Tue, 16 Sep 2008 16:21:32 +0200
+
+userdir-ldap-cgi (0.3.18) unstable; urgency=low
+
+  * Add password checking via a python wrapper.
+  * Add myself to uploaders.
+
+ -- Peter Palfrader <weasel@debian.org>  Mon, 15 Sep 2008 14:25:51 +0200
+
+userdir-ldap-cgi (0.3.17) unstable; urgency=low
+
+  * Comment out uuid - nobody will get it's just an identifier.
+
+ -- Peter Palfrader <weasel@debian.org>  Mon, 15 Sep 2008 00:47:52 +0200
+
+userdir-ldap-cgi (0.3.16) unstable; urgency=low
+
+  * Switch host and hostname in update cgi for sudopasswd (so "gluck" gets
+    displayed and "gluck.debian.org" stored).
+
+ -- Peter Palfrader <weasel@debian.org>  Mon, 15 Sep 2008 00:43:55 +0200
+
 userdir-ldap-cgi (0.3.15) unstable; urgency=low
 
   * Allow setting of userpassword.