Quarkus 1.0.1.Final released - Important security fix
We just released 1.0.1.Final to fix an important security issue introduced in CR2 and still present in 1.0.0.Final.
Please upgrade to this version as soon as possible if you are using our security layer.
変更点
Security issue fix
If you are using our security annotations (e.g. @RolesAllowed
) and also other annotations (such as Bean Validation annotations) on the parameters of your secured methods, the security checks would entirely be bypassed.
This issue was originally reported here: https://github.com/quarkusio/quarkus/issues/5763 .
1.0.1.Final fixes this issue and upgrade is highly recommended.
完全な変更履歴
You can get the full changelog of 1.0.1.Final on GitHub.
参加のお誘い
私達は皆様からのフィードバックに重きを置いています。バグ報告、改善要望を是非お願いします。一緒に素晴らしいものを作り上げていきましょう!
Quarkusユーザーの場合でも、単に興味を持っているだけの場合でも、恥ずかしがらずにコミュニティに参加して下さい!:
-
GitHub でフィードバック
-
コードを作成し、 プルリクエスト を送信
-
Stack Overflow で質問