Concourse v5.2.8 Release Notes

Release Date: 2020-03-24 // about 4 years ago
  • ๐Ÿฑ ๐Ÿ”— fix

    • ๐Ÿ›  Fix an edge case of CVE-2018-15798 where redirect URI during login flow could be embedded with a malicious host.

    ๐Ÿฑ ๐Ÿ”— fix

    • โž• Added a flag, --disable-list-all-jobs. When this flag is passed, the /api/v1/jobs endpoint (which is known to have performance issues) will always return an empty JSON array instead of making complex and expensive database operations. The most significant end-user impact of this change should be that the dashboard will no longer display pipeline previews. #5340