X-Git-Url: http://xvm.mit.edu/gitweb/invirt/packages/invirt-web.git/blobdiff_plain/3af581a2c32b663957e6ecf0d27ce3a13d54daeb..58eccae357182103ef15844b74c96aaa4bae7d93:/debian/changelog

diff --git a/debian/changelog b/debian/changelog
index 20e3437..1d8e0f3 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+invirt-web (0.1.18) unstable; urgency=low
+
+  * Require a valid Referer header for any POSTed form, as a guard against
+    cross-site request forgery.
+
+ -- Joshua Oreman <oremanj@mit.edu>  Sat, 07 May 2011 22:34:46 -0400
+
 invirt-web (0.1.17) unstable; urgency=low
 
   * Add support for amd64 and i386 squeeze autoinstalls.