IdentityServer8 Release 8.0.4

[alexhiggins732]

[8.0.4] - 2024-02-17

Identity Server 8.0.4 is a security release that addresses hundreds of security vulnerabilities in the IdentityServer8 code base. We recommend that you update to this version.

• Fix over 100+ security vulnerabilities in the IdentityServer8 code base:
• Identity Server Security Bug: Unsafe expansion of self-closing HTML tag #17 Unsafe expansion of self-closing HTML tag
• Identity Server Security Bug: URL redirection from remote source #18 URL redirection from remote source
• Identity Server Security Bug: DOM text reinterpreted as HTML #19 DOM text reinterpreted as HTML
• Identity Server Security Bug: Incomplete string escaping or encoding #20 Incomplete string escaping or encoding
• Identity Server Security Bug: Inefficient regular expression #21 Inefficient regular expression bug dependencies
• Identity Server Security Bug: Bad HTML filtering regexp  #22 Bad HTML filtering regexp bug dependencies
• Identity Server Security Bug: User-controlled bypass of sensitive method #23 User-controlled bypass of sensitive method bug
• Identity Server Security Bug: Unsafe jQuery plugins #24 Unsafe jQuery plugins bug dependencies

What's Changed

• Release/8.0.2 by @alexhiggins732 in Release/8.0.2 #12
• Bump the npm_and_yarn group across 2 directories with 10 updates by @dependabot in Bump the npm_and_yarn group across 2 directories with 10 updates #13
• Release/8.0.3 by @alexhiggins732 in Release/8.0.3 #14
• Feature/upgrade old clients to dotnet8 by @alexhiggins732 in Feature/upgrade old clients to dotnet8 #15
• Feature/implicit usings by @alexhiggins732 in Feature/implicit usings #16
• Feature/implicit usings - Add Implicit usings and DotNet8 style packaging and code to Samples by @alexhiggins732 in Feature/implicit usings - Add Implicit usings and DotNet8 style packaging and code to Samples #28
• Code Cleanup by @alexhiggins732 in Code Cleanup #33
• Identity Server 8 - Release/8.0.4 by @alexhiggins732 in Identity Server 8 - Release/8.0.4 #34

Full Changelog: 8.0.2...8.0.4

---

This discussion was created from the release IdentityServer8 Release 8.0.4.