Skip to content

2.0.6
Compare
Choose a tag to compare
@kelunik kelunik released this 09 May 19:51
· 850 commits to 5.x since this release
v2.0.6
This tag was signed with the committer’s verified signature.
kelunik Niklas Keller
GPG key ID: AFA536ABA90C76A6
Verified
Learn about vigilant mode.
8ed34eb

Security and maintenance release.

  • Security: Previously cookies of foo.bar.example.com were leaked to foo.bar. Additionally, any site could set cookies for any other site. Artax follows newer browser implementations now. Cookies can only be set on domains higher or equal to the current domain, but not on any public suffixes.
  • Added Notify::HANDSHAKE_COMPLETE to allow e.g. inspecting the crypto information.
Assets 2
Loading