From f7ccef89ef1e83c248ac75890e5e12e918eb07d7 Mon Sep 17 00:00:00 2001 From: gordielachance Date: Wed, 29 Nov 2017 11:30:58 +0100 Subject: [PATCH] 2.0.8 --- CHANGELOG.md | 7 +++++++ addon.xml | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 242d7ee..8a16046 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,12 @@ # Changelog +## v2.0.8 +Released 29th November 2017 (by Heruwar) +* Fixes a security issue where the password is sent as plaintext in the URL query parameters when methods from libsonic_extas are used. +Also adds Subsonic hex encoding when using legacy auth. +* Adds support for URL paths like https://hostname.com/subsonic as requested in Github issue #17 and also encountered in some of the reports (#14 and #5) +* Fixes an error when the password only contains digits, which simpleplugin converts to a Long, which later fails when libsonic tries to salt the password expecting a string. + ## v2.0.7 Released 18 April 2017 * Added Search (by silascutler) diff --git a/addon.xml b/addon.xml index ac8620e..c630c93 100644 --- a/addon.xml +++ b/addon.xml @@ -1,5 +1,5 @@ - +