From: rinpatch Date: Wed, 31 Jul 2019 20:03:06 +0000 (+0300) Subject: Add a changelog entry for disallowing locked accounts follows over OStatus X-Git-Url: https://git.squeep.com/?a=commitdiff_plain;h=def0c49ead94d21a63bdc7323521b6d73ad4c0b2;p=akkoma Add a changelog entry for disallowing locked accounts follows over OStatus --- diff --git a/CHANGELOG.md b/CHANGELOG.md index b02ed243b..bd64b2259 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). ## [Unreleased] ### Security - OStatus: eliminate the possibility of a protocol downgrade attack. +- OStatus: prevent following locked accounts, bypassing the approval process. ### Changed - **Breaking:** Configuration: A setting to explicitly disable the mailer was added, defaulting to true, if you are using a mailer add `config :pleroma, Pleroma.Emails.Mailer, enabled: true` to your config