diff options
| author | Thomas Steur <tsteur@users.noreply.github.com> | 2020-08-07 10:31:23 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-08-07 10:31:23 +0300 |
| commit | a3864f48524ffb4198284bd3912c4c3d0c5104c9 (patch) | |
| tree | a48666aff9d120b0bc656c77bd8839798c0f3dc2 /CHANGELOG.md | |
| parent | f5e9420a987340b036fa342e876ab92e314f4ec7 (diff) | |
require only view access for embedded widgets when using tokens (#16264)
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index ca4d7b5bbf..796bd11048 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -127,6 +127,7 @@ These are only recommendations (because we will keep backward compatibility for ### Other Breaking changes +* When embedding reports (widgets) into a different site, it is no longer possible to use authentication tokens of users with at least write access * The log importer in `misc/log-analytics` now supports Python 3 (3.5, 3.6, 3.7 or 3.8), it will no longer run with Python 2. If you have any automated scripts that run the importer, you will have to change them to use the Python 3 executable instead. * Matomo now uses the SERVER_NAME for host validation and no longer the HOST header. If you're running Matomo behind a load balancer or a proxy you need to ensure that SERVER_NAME is set correctly. * Deprecated `piwik` font was removed. Use `matomo` font instead |