summaryrefslogtreecommitdiff
path: root/CHANGES.txt
diff options
context:
space:
mode:
Diffstat (limited to 'CHANGES.txt')
-rw-r--r--CHANGES.txt7
1 files changed, 7 insertions, 0 deletions
diff --git a/CHANGES.txt b/CHANGES.txt
index dcbe01bb3..d8a30aa4a 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -1,3 +1,10 @@
+Next release
+
+ - Change default paster template generator to use ``Paste#http``
+ server rather than ``PasteScript#cherrpy`` server. The cherrypy
+ server has a security risk in it when ``REMOTE_USER`` is trusted
+ by the downstream application.
+
0.4.1 (10/28/2008)
Bug Fixes