2 ms·
Not disclosing in release change logs potentially increase the chance of people being affected. If I see a changelog with XSS fixed I will update a product str
by lysp 8y ago
Not disclosing in release change logs potentially increase the chance of people being affected.
If I see a changelog with XSS fixed I will update a product straight away, if I don't - I might leave it a week or two until I have time.