Identity Server 8 - Release/8.0.4 #34
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…s-to-dotnet8 Feature/upgrade old clients to dotnet8
…n of return urls supplied by user input.
Feature/implicit usings
Welcome to Codecov 🎉Once merged to your default branch, Codecov will compare your coverage reports and display the results in this comment. Thanks for integrating Codecov - We've got you covered ☂️ |
alexhiggins732
added
bug
alexhiggins732
added this to the Patched DotNet8 Top-Level Statements and Implicit Usings Release milestone
This was
linked to
issues
Feb 17, 2024
11 tasks
Open
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Identity Server 8 - Release [8.0.4] - 2024-02-17
Identity Server 8.0.4 is a security release that addresses hundreds of security vulnerabilities in the IdentityServer8 code base. We recommend that you update to this version.
Fix over 100+ security vulnerabilities in the IdentityServer8 code base:
#17 Unsafe expansion of self-closing HTML tag
#18 URL redirection from remote source
#19 DOM text reinterpreted as HTML
#20 Incomplete string escaping or encoding
#21 Inefficient regular expression bug dependencies
#22 Bad HTML filtering regexp bug dependencies
#23 User-controlled bypass of sensitive method bug
#24 Unsafe jQuery plugins bug dependencies
Additionally, the codebase has been refactored to use the latest DotNet 8 features and best practices.
This includes refactoring in #25 and consolidation of reused code that removes and additional 250,000 lines of code, bringing the total lines of redundant code removed from the codebase to 1 million lines of code from the base. Unit Test code coverage is now at 90% of the main code base.