plugeth/extapi_changelog.md at d3441ebb563439bac0837d70591f92e2c6080303

Martin Holst Swende d3441ebb56

cmd/clef, signer: security fixes (#17554 )

* signer: remove local path disclosure from extapi

* signer: show more data in cli ui

* rpc: make http server forward UA and Origin via Context

* signer, clef/core: ui changes + display UA and Origin

* signer: cliui - indicate less trust in remote headers, see https://github.com/ethereum/go-ethereum/issues/17637

* signer: prevent possibility swap KV-entries in aes_gcm storage, fixes #17635

* signer: remove ecrecover from external API

* signer,clef: default reject instead of warn + valideate new passwords. fixes #17632 and #17631

* signer: check calldata length even if no ABI signature is present

* signer: fix failing testcase

* clef: remove account import from external api

* signer: allow space in passwords, improve error messsage

* signer/storage: fix typos

2018-09-25 15:54:58 +02:00

1022 B

Raw Blame History

Changelog for external API

4.0.0

The external account_Ecrecover-method was removed.
The external account_Import-method was removed.

3.0.0

The external account_List-method was changed to not expose url, which contained info about the local filesystem. It now returns only a list of addresses.

2.0.0

Commit 73abaf04b1372fa4c43201fb1b8019fe6b0a6f8d, move from into transaction object in signTransaction. This makes the accounts_signTransaction identical to the old eth_signTransaction.

1.0.0

Initial release.

Versioning

The API uses semantic versioning.

TLDR; Given a version number MAJOR.MINOR.PATCH, increment the:

MAJOR version when you make incompatible API changes,
MINOR version when you add functionality in a backwards-compatible manner, and
PATCH version when you make backwards-compatible bug fixes.

Additional labels for pre-release and build metadata are available as extensions to the MAJOR.MINOR.PATCH format.

1022 B Raw Blame History