From e393845caebfa2e6338fd5d0360e9c596b5e909c Mon Sep 17 00:00:00 2001 From: mattf Date: Tue, 6 Jul 2021 14:48:26 +0000 Subject: [PATCH] SECURITY NOTE: For agent screen Webform buttons, we have changed the default behavior to not include user credentials in non-custom URL strings unless you set the new agc/options.php settings to do so: "$user_pass_webform and "$phone_login_webform" See the "agc/options-example.php" file for more information. *This will not affect custom webform query strings that start with "VAR" git-svn-id: svn://192.168.202.10@3475 3d104415-ff17-0410-8863-d5cf3c621b8a --- agc_2-X/trunk/UPGRADE | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/agc_2-X/trunk/UPGRADE b/agc_2-X/trunk/UPGRADE index a0009fe5..46e4bfaf 100644 --- a/agc_2-X/trunk/UPGRADE +++ b/agc_2-X/trunk/UPGRADE @@ -657,6 +657,13 @@ OTHER CHANGES: 183. Added display of active Call Time Holidays in the agent screen Scheduled Callbacks calendar panel. +184. SECURITY NOTE: For agent screen Webform buttons, we have changed the + default behavior to not include user credentials in non-custom URL + strings unless you set the new agc/options.php settings to do so: + "$user_pass_webform and "$phone_login_webform" + See the "agc/options-example.php" file for more information. + *This will not affect custom webform query strings that start with "VAR" +