Skip to content

Releases: obsidiansystems/haveibeenpwned

v0.2.0.3

18 Jan 22:26
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.2.0.2...v0.2.0.3

v0.2.0.2

18 Jan 18:35
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v0.2.0.1...v0.2.0.2

v0.2.0.1

18 Nov 20:24
Compare
Choose a tag to compare

0.2.0.1

  • Add readme to extra-source-files so that it appears on hackage

v0.2.0.0

18 Nov 20:16
8203fc2
Compare
Choose a tag to compare

0.2.0.0

  • Breaking change in order to make the API and the implementation more secure.
    • There is a new HaveIBeenPwnedResult_Secure constructor which signals that the given password was not found in any database.
    • The HaveIBeenPwnedResult_Disclosed constructor has been renamed to HaveIBeenPwnedResult_Pwned, as its behaviour changed. (Valid passwords are no longer signalled by this constructor.)
  • Also internally, a "not found in database" is no longer represented as a disclosed count of zero. This improves security in the case of an incorrect database entry, having a disclosed count of 0, which would make this library report that password as "secure", although it actually has been leaked.