diff --git a/README.md b/README.md index b892078..41a4096 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@ +[![Build Status](https://travis-ci.org/Asquera/elasticsearch-http-basic.svg?branch=master)](https://travis-ci.org/Asquera/elasticsearch-http-basic) -**IMPORTANT NOTICE**: versions 1.0.4 and 1.1.0 are *insecure and should not be used*. +**IMPORTANT NOTICE**: versions 1.0.4 is *insecure and should not be used*. They have a bug that allows an attacker to get ip authentication by setting -its ip on the 'Host' header. A fix is provided for versions v1.2.0 and -v.1.3.0 of the plugin. +its ip on the 'Host' header. # HTTP Basic auth for ElasticSearch @@ -18,8 +18,8 @@ There is no way to configure this on a per index basis. | Http Basic Plugin | elasticsearch | |-----------------------------|-----------------------| -| v1.4.0.Beta1 (1.4.0.Beta1) | 1.4.0.Beta1 | -| v1.3.0(master) | 1.3.0 | +| v1.4.0(master) | 1.4.0 | +| v1.3.0 | 1.3.0 | | v1.2.0 | 1.2.0 | | 1.1.0 | 1.0.0 | | 1.0.4 | 0.90.7 | diff --git a/pom.xml b/pom.xml index e840fd9..848551b 100644 --- a/pom.xml +++ b/pom.xml @@ -12,8 +12,9 @@ UTF-8 - 1.4.0.Beta1 - 4.10.1 + 1.4.0 + 4.10.2 + 4.10.2 @@ -21,7 +22,7 @@ org.apache.lucene lucene-test-framework - ${lucene.version} + ${lucene.maven.version} test @@ -32,6 +33,12 @@ test + + com.carrotsearch.randomizedtesting + randomizedtesting-runner + 2.1.10 + test + org.elasticsearch elasticsearch