diff --git a/CHANGELOG.md b/CHANGELOG.md index 4c0b34a5209c980192935389b6460b5e56932ccf..03cb19349d13e503e21a776e7666ab95f60d8797 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,13 @@ # Changelog +## 2.2.2 +This release fixes a security vulnerability caused by the CORS implementation. +Origins allowed for CORS can now be set in the configuration via +`security.cors.origins`. (Reported by Rainer Rillke at Wikimedia) + +Additional changes: +* Libraries have been upgraded to fix potential bugs + ## 2.1.2 This release fixes a security vulnerability caused by the CORS implementation. Support for cross-origin requests has been removed. Use ARSnova version 2.2 or diff --git a/pom.xml b/pom.xml index f834170a34253145196fee447ab3d0cc7996188b..044c775d1e0633fb9c7a316b40f533b4a388f552 100644 --- a/pom.xml +++ b/pom.xml @@ -3,7 +3,7 @@ <modelVersion>4.0.0</modelVersion> <groupId>de.thm.arsnova</groupId> <artifactId>arsnova-backend</artifactId> - <version>2.2.2-SNAPSHOT</version> + <version>2.2.2</version> <packaging>war</packaging> <properties>