Add VSV00010 to the changelog

d0b7402a · Martin Blix Grydeland · 31a157cc · d0b7402a
Commit d0b7402a authored Oct 10, 2022 by Martin Blix Grydeland
Hide whitespace changes
Inline Side-by-side

Showing with 10 additions and 0 deletions

changes.rst doc/changes.rst +10 -0

No files found.
--- a/doc/changes.rst
+++ b/doc/changes.rst
@@ -31,6 +31,16 @@ http://varnish-cache.org/docs/trunk/whats-new/index.html and via
 individual releases. These documents are updated as part of the
 release process.

+================================
+Varnish Cache 7.1.2 (unreleased)
+================================
+
+* Attempts to mark well-known headers like `Content-Length` and `Host`
+  hop-by-hop through a `Connection`-header will now cause a 400 "Bad
+  request" response. (VSV00010_)
+
+.. _VSV00010: https://varnish-cache.org/security/VSV00010.html
+
 ================================
 Varnish Cache 7.1.1 (2022-08-09)
 ================================