Add trusted.url.domains default value change to upgrade notes

e5daae77 · dialogik · b7af6b36 · e5daae77
Commit e5daae77 authored 9 years ago by dialogik
--- a/docs/simplesamlphp-upgrade-notes-1.14.txt
+++ b/docs/simplesamlphp-upgrade-notes-1.14.txt
@@ -179,3 +179,5 @@ The following modules will no longer be shipped with the next version of SimpleS
    * `openidProvider`
    * `saml2debug`
    * `themefeidernd`
+
+The default value for trusted.url.domains in the config template has been changed from NULL to an empty array(), this sets a higher grade of default security. Resetting to NULL will re-allow untrusted routing.