Closed muglug closed 1 year ago
It's a slightly tricky thing. It is technically a breaking change, but since it is a security fix I wanted it to be on the 3.x series. I feel like there isn't really an absolute right answer for what to do in this situation and people could argue either way. I made a choice and am going to stick with that choice. Hope it wasn't too much of a hassle for you.
This fix changed what I think is a public API.
Should that have landed in a major version?