changelog/gotchas for account change

plainblack · May 26, 2011 · 76a69c9 · 76a69c9
1 parent 7b796ed
commit 76a69c9
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/docs/changelog/7.x.x.txt b/docs/changelog/7.x.x.txt
@@ -1,6 +1,8 @@
 7.10.18
  - fixed #12141: Macro_RenderThingData (bad tags) nothing to translate
  - fixed #12142: Copy fails on imported threads
+ - canView will now be checked before calling ANY www_ method on account
+   plugins to fix an Inbox security bug (and other similar potential bugs).
 
 7.10.17
  - fixed: Forced to use a PayDriver even with a balance of 0 in the cart.

diff --git a/docs/gotcha.txt b/docs/gotcha.txt
@@ -10,6 +10,10 @@ save you many hours of grief.
 7.10.15
 --------------------------------------------------------------------
     * WebGUI now depends on Geo::Coder::Googlev3 for it's Map asset
+    * canView has to pass for any www_ methods to get called at all on account
+      plugins. This is the correct behavior, but is a change in this version.
+      Please review your custom account plugins to make sure you aren't
+      relying on the old buggy behavior.
 
 7.10.13
 --------------------------------------------------------------------