Move changelog entry to new v2.0.3 section

This commit is contained in:
Dave Hart
2026-04-29 10:41:40 -04:00
parent c897607c7f
commit ff8e13f876
+3 -1
View File
@@ -1,9 +1,11 @@
# CHANGELOG
## v2.0.2
## v2.0.3
FIX: Frontends configured with `interstitial.user_agent_prefixes` no longer suppress the interstitial page for all requests. The prefix list is now correctly evaluated as an allow-list of User-Agents that should receive the page; if the list is empty all User-Agents receive it, matching the documented behavior.
## v2.0.2
FIX: The `drive` backend mode WebDAV implementation now prevents symlink traversal outside the configured shared directory. `Stat`, `OpenFile`, `Mkdir`, `RemoveAll`, and `Rename` now reject symlinks that resolve outside the drive root while continuing to allow symlinks that resolve within that tree. This fixes GHSA-74m3-9qvm-rp9h.
## v2.0.1