Today's update (ba9f819) brings with it the following changes:
Security issues
- Set a limit on how large HTTP uploads are allowed to be, to avoid a potential denial-of-service situation.
Bugfixes
- When logging in directly by clicking on a product in e-portal that uses
the OIDC-based login method, a session cookie was not generated before
redirecting to e-portal login system. This caused a Portfolio login prompt
to be shown when returning from e-portal and trying to synchronize
permissions. This issue should now be fixed.
- Fixed issue where HTTP uploads larger than 1MB might not work properly.
Feature removals / deprecations
- Removed unused Portfolio::Course->student_progress() method.