Branch: refs/heads/release_15.01 Home: https://github.com/galaxyproject/galaxy Commit: cbae8fab672e302094bb5adaa3921e9feae87224 https://github.com/galaxyproject/galaxy/commit/cbae8fab672e302094bb5adaa3921... Author: Nate Coraor <nate@bx.psu.edu> Date: 2015-08-12 (Wed, 12 Aug 2015) Changed paths: M lib/galaxy/webapps/galaxy/controllers/workflow.py Log Message: ----------- Fix an XSS reflection vulnerability on the workflow import form. Commit: 8e7017a6b125ce5a079cc15c5f26148071b0c366 https://github.com/galaxyproject/galaxy/commit/8e7017a6b125ce5a079cc15c5f261... Author: Martin Cech <cech.marten@gmail.com> Date: 2015-08-12 (Wed, 12 Aug 2015) Changed paths: M lib/galaxy/webapps/tool_shed/api/repositories.py Log Message: ----------- Fix a vulnerability in the Tool Shed API that allowed unauthorized users to upload new repository versions. Commit: 6dc5f022c73d5bde3b4ef1abe31a8d3b37ade9c3 https://github.com/galaxyproject/galaxy/commit/6dc5f022c73d5bde3b4ef1abe31a8... Author: Nate Coraor <nate@bx.psu.edu> Date: 2015-08-12 (Wed, 12 Aug 2015) Changed paths: M lib/galaxy/webapps/galaxy/controllers/workflow.py Log Message: ----------- Merge branch 'security-20150812-xss' into release_15.01 Commit: 096a1686badda620acb507deaf9382ccee37086a https://github.com/galaxyproject/galaxy/commit/096a1686badda620acb507deaf938... Author: Nate Coraor <nate@bx.psu.edu> Date: 2015-08-12 (Wed, 12 Aug 2015) Changed paths: M lib/galaxy/webapps/tool_shed/api/repositories.py Log Message: ----------- Merge branch 'security-20150812-shed' into release_15.01 Compare: https://github.com/galaxyproject/galaxy/compare/9f67bdbab5bb...096a1686badd