Release 1.0.4

Signed-off-by: Edward Z. Yang <[email protected]>
jasonstockman · Jul 17, 2013 · 2fe84ec · 2fe84ec
1 parent fdb0ebc
commit 2fe84ec
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 1 deletion.
diff --git a/NEWS.txt b/NEWS.txt
@@ -1,6 +1,24 @@
 
                             [[     news     ]]
 
+1.0.4 released 2013-07-17
+
+  [SECURITY FIXES]
+
+    - When secret key was not explicitly set, it was not being used
+      by the csrf_hash() function.  Thanks sparticvs for reporting.
+
+  [FEATURES]
+
+    - The default 'CSRF check failed' page now offers a handy 'Try
+      again' button, which resubmits the form.
+
+  [BUG FIXES]
+
+    - The fix for 1.0.3 inadvertantly turned off XMLHttpRequest
+      overloading for all browsers; it has now been fixed to only
+      apply to IE.
+
 1.0.3 released 2012-01-31
 
  [BUG FIXES]

diff --git a/csrf-magic.php b/csrf-magic.php
@@ -131,7 +131,7 @@
 // FUNCTIONS:
 
 // Don't edit this!
-$GLOBALS['csrf']['version'] = '1.0.1';
+$GLOBALS['csrf']['version'] = '1.0.4';
 
 /**
  * Rewrites <form> on the fly to add CSRF tokens to them. This can also