Skip to content

v1.4.2
Compare
Choose a tag to compare
@jdesrosiers jdesrosiers released this 20 Sep 03:39
· 7 commits to master since this release
v1.4.2
d9eab0d

The CORS specification defines "null" as the value for the Access-Control-Allow-Origin header when an origin is rejected. However, it turns out that there are ways for this to be exploited. Thanks to @slipo for bringing this to my attention and providing a patch.

Assets 2
Loading