Skip to content

MSAL Python 1.24.1 #601

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 11 commits into from
Sep 29, 2023
Merged

MSAL Python 1.24.1 #601

merged 11 commits into from
Sep 29, 2023

Conversation

rayluo
Copy link
Collaborator

@rayluo rayluo commented Sep 27, 2023

Release notes

Includes minor adjustments on handling acquire_token_interactive(). The scope of the issue being addressed was limited to a short-lived sign-in attempt. The potential misuse vector complexity was high, therefore it is unlikely to be reproduced in standard usage scenarios; however, out of abundance of caution, this fix will be shipped to align ourselves with Microsoft's policy of secure-by-default.

@rayluo rayluo marked this pull request as ready for review September 28, 2023 22:55
@rayluo rayluo merged commit db74e80 into main Sep 29, 2023
@rayluo rayluo deleted the release-1.24.1 branch September 29, 2023 07:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Reported vulnerability: Improper Neutralization of Special Elements in Data Query Logic
1 participant