From 7aa05f00f7d809763105edc1b15301efa80fa654 Mon Sep 17 00:00:00 2001 From: Eric Franz Date: Fri, 23 Oct 2020 16:43:46 -0400 Subject: [PATCH] bump version to 1.8.16 --- CHANGELOG.md | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 43c99302ba..cf748e24c3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,15 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html). ## [Unreleased] +## [1.8.16] - 2020-10-23 +### Fixed +- accessibility: update html titles of apps to be a little more specific to reduce ambiguity [#698](https://github.com/OSC/ondemand/pull/698) + +### Security +- properly escape user input by using Open3 capture methods [#702](https://github.com/OSC/ondemand/pull/702) +- by default, set Content Security Policy frame-ancestors: none for all requests, which can be disabled setting security_disable_frames: false in the ood_portal.yml [#697](https://github.com/OSC/ondemand/pull/697) +- by default, set HSTS if SSL is in use, which can be disabled setting security_strict_transport: false in the ood_portal.yml [#697](https://github.com/OSC/ondemand/pull/697) + ## [1.8.15] - 2020-10-08 ### Fixed - replace text "XDMoD" with "Open XDMoD" in Job Composer @@ -580,7 +589,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. - From 1.3.7 - 1.4.2 updated app versions -[Unreleased]: https://github.com/OSC/ondemand/compare/v1.8.15...HEAD +[Unreleased]: https://github.com/OSC/ondemand/compare/v1.8.16...HEAD +[1.8.16]: https://github.com/OSC/ondemand/compare/v1.8.15...v1.8.16 [1.8.15]: https://github.com/OSC/ondemand/compare/v1.8.14...v1.8.15 [1.8.14]: https://github.com/OSC/ondemand/compare/v1.8.13...v1.8.14 [1.8.13]: https://github.com/OSC/ondemand/compare/v1.8.12...v1.8.13