release 7.3.1

CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [7.3.1]
+
+- Prevent Host header injection attacks on the password recovery endpoint. A new setting
+  `commafeed.password-recovery-public-base-url` has been added to specify the base URL to use in password recovery
+  emails. This setting is only required when the password recovery feature is enabled, which is not the default.
+
 ## [7.3.0]
 
 - Add support for the Google Reader API for native mobile apps that don't support the Fever API

commafeed-client/pom.xml

@@ -6,7 +6,7 @@
 	<parent>
 		<groupId>com.commafeed</groupId>
 		<artifactId>commafeed</artifactId>
-		<version>7.3.0</version>
+		<version>7.3.1</version>
 	</parent>
 	<artifactId>commafeed-client</artifactId>
 	<name>CommaFeed Client</name>

commafeed-server/pom.xml

@@ -6,7 +6,7 @@
     <parent>
         <groupId>com.commafeed</groupId>
         <artifactId>commafeed</artifactId>
-        <version>7.3.0</version>
+        <version>7.3.1</version>
     </parent>
     <artifactId>commafeed-server</artifactId>
     <name>CommaFeed Server</name>
@@ -302,7 +302,7 @@
         <dependency>
             <groupId>com.commafeed</groupId>
             <artifactId>commafeed-client</artifactId>
-            <version>7.3.0</version>
+            <version>7.3.1</version>
         </dependency>
 
         <!-- compile-time processors -->

pom.xml

@@ -5,7 +5,7 @@
 
 	<groupId>com.commafeed</groupId>
 	<artifactId>commafeed</artifactId>
-	<version>7.3.0</version>
+	<version>7.3.1</version>
 	<name>CommaFeed</name>
 	<packaging>pom</packaging>