Actions
Feature #21948
open
Restrict display of the release year in the footer
Status:
New
Priority:
Normal
Assignee:
-
Category:
Security
Target version:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Resolution:
Description
It is very easy to find instances of old, vulnerable Redmine versions, e.g. via https://duckduckgo.com/?q=%222007+Jean-Philippe+Lang%22.
So, similar to #794, the release year should be shown to logged in users or admins only.
Related issues
Updated by
Actions