From 66c8819283e7088a508bdd07e2d1693f3757d42b Mon Sep 17 00:00:00 2001
From: Bernhard Posselt <dev@bernhard-posselt.com>
Date: Thu, 25 Aug 2016 17:54:35 +0200
Subject: Prevent chrome from completing basic auth credentials

---
 CHANGELOG.md | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'CHANGELOG.md')

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 409f3e804..efe29f936 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,6 @@
+news (9.0.3)
+* **Security (Low)**: Prevent browsers like Chrome from auto-filling your Nextcloud login credentials into Basic Auth form. This could lead users to accidentally saving their credentials in the database and disclosing them to the feed source when the feed is added/updated
+
 news (9.0.2)
 * **Bugfix**: Do not return millisecond lastModified timestamps in API, #20
 
-- 
cgit v1.2.3