运维利器 RunDeck v3.0.13 已发布。RunDeck 是用 Java/Grails 写的开源工具，帮助用户在数据中心或者云环境中自动化各种操作和流程。通过命令行或者 Web 界面，用户可以对任意数量的服务器进行操作，大大降低了对服务器自动化的门槛。

更新内容如下：

• potential stored XSS vulnerability (https://github.com/rundeck/rundeck/pull/4406)

• add Content-Security-Policy and other security HTTP headers to responses (see more info https://github.com/rundeck/rundeck/pull/4405)

• new version of winrm plugin 1.0.10

• Fix Plugin list api by referencing correct plugin list information service

• Add CSP header control variables to Docker image

• Fix #4406: stored xss vulnerability

• Security: stored XSS vulnerability

• Add common web-app security headers

• Add new flag to enable UI plugins on all pages

• Remove environment variable that hijacks jvm ssl settings

• UI plugin install status fix

• Fix #4374. User and role set by AJP were not being properly set.

• Fixes #4376. Partial templates are now expanded and added to base property file.

• Update spring security plugin to last version.

• UUID validation on jobref

• email notification enhancement

• Fix #2975 multiple threads modify the map

• Fixes #115.

• User profile information can be sync'd from LDAP

• UUID validation and Autocomplete in Job Reference Workflow step

• Feature/multi repository support

• Execution Metrics API

• java.lang.ClassCastException: java.util.HashMap$Node cannot be cast to java.util.HashMap$TreeNode

• LDAP login with empty password

•