Skip to content

v1.1.1
Compare
Choose a tag to compare
@sredxny sredxny released this 26 Mar 16:45
· 109 commits to master since this release
v1.1.1
215a4d0
This commit was created on github.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
  • Fixed SAML vulnerability where the Go XML parser can cause SAML authentication bypass. The XML parser doesn’t guarantee integrity in the XML round-trip (encoding/decoding XML data) leading to make the SAML authentication bypass possible.
  • Enhanced error messages coming from mongo store
  • Implemented redis backend to make TIB work better behind a load balancer
  • TIB’s proxy flow now insert upstream host header into the call, so it will work with any upstream service that verifies Host headers against expected host headers.
Assets 2
Loading