<p><div><div><div><div data-width="100" data-show-faces="false" data-send="true" data-layout="button_count" data-height="21" data-href="https://www.r-bloggers.com/shiny-server-pro-1-4-6/"></div></div><div><a data-url="https://www.r-bloggers.com/shiny-server-pro-1-4-6/" data-counturl="https://www.r-bloggers.com/shiny-server-pro-1-4-6/" data-count="horizontal" data-text="Shiny Server (Pro) 1.4.6" class="twitter-share-button" data-via="rbloggers" href="https://twitter.com/share"></a></div><div></div></div><div></div></div>
<div>
(This article was first published on <strong><a href="https://blog.rstudio.org/2016/09/22/shiny-server-1-4-6/"> RStudio Blog</a></strong>, and kindly contributed to <a rel="nofollow" href="https://www.r-bloggers.com/">R-bloggers)</a> </div>
<p>We’ve just released Shiny Server and Shiny Server Pro 1.4.6. Relative to 1.4.2, our previously blogged-about version, the 1.4.6 release primarily includes bug fixes, and mitigations for low-severity security issues found by penetration testing. The full list of changes is after the jump.</p>
<p>If you’re running a Shiny Server Pro release that is older than 1.4.3 <em>and</em> are configured to use SSL/TLS, it’s especially important that you upgrade, as the versions of Node.js that are bundled with Shiny Server Pro 1.4.3 and earlier include vulnerable versions of OpenSSL.</p>
<p><strong>Shiny Server (Open Source):</strong> <a target="_blank" href="https://www.rstudio.com/products/shiny/download-server/">Download now</a></p>
<p><strong>Shiny Server Pro:</strong> If you already have a license or evaluation key, please <a target="_blank" href="https://www.rstudio.com/products/shiny/download-commercial/">upgrade now</a>. Otherwise, you can <a target="_blank" href="https://www.rstudio.com/products/shiny-server-pro/evaluation/">start a free 45-day evaluation</a>.</p>
<p><span></span></p>
<p> </p>
<h3>Shiny Server Pro 1.4.6</h3>
<p>Bug fix release.</p>
<ul>
<li>Fix a bug where a 404 response on some URLs could cause the server to exit with an unhandled exception.</li>
</ul>
<h3>Shiny Server Pro 1.4.5</h3>
<p>Security release to fix minor issues raised in penetration test results.</p>
<ul>
<li>Add <code>disable_login_autocomplete</code> directive that can be used to instruct browsers not to attempt to autocomplete on the login screen. Note that servers can only suggest this behavior to browsers (and in particular, Google Chrome chooses not to comply, as its developers argue that disabling autocomplete decreases security rather than increasing it).</li>
<li>Add opt-in clickjacking protection via <code>frame_options</code> directive. Login and /admin URLs now served with <code>X-Frame-Options: DENY</code> (the former can be opted out with an <code>auth_frame_options allow;</code> directive).</li>
<li>Fix open redirection on __login__. Previously, a URL created with malicious intent could cause you to go to an arbitrary URL after successful login. Now, it is only possible to be redirected to a path on Shiny Server.</li>
<li>Add Cross-Site Request Forgery (CSRF) protection to login and other POST operations.</li>
</ul>
<h3>Shiny Server Pro 1.4.4</h3>
<ul>
<li>Fix fatal EBADF error that could cause server crashes.</li>
<li>Updated PAM integration to resolve bug with asynchronous PAM modules like pam_ldap, pam_vas, and nss_ldap.</li>
<li>Upgrade to Node.js v0.10.46 (security patches).</li>
</ul>
<h3>Shiny Server Pro 1.4.3</h3>
<ul>
<li>Added proxied authentication mechanism via the `auth_proxy` option.</li>
<li>Upgrade to Node.js v0.10.45 (primarily for updated OpenSSL).</li>
</ul>
<p> <a target="_blank" rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/rstudioblog.wordpress.com/3197/"><img alt="" src="http://feeds.wordpress.com/1.0/comments/rstudioblog.wordpress.com/3197/" border="0"></a> <img alt="" src="https://i1.wp.com/pixel.wp.com/b.gif?resize=1%2C1&ssl=1" border="0" data-recalc-dims="1"></p>
<p><div><div><div><div data-width="55" data-show-faces="false" data-send="true" data-layout="box_count" data-height="62" data-href="https://www.r-bloggers.com/shiny-server-pro-1-4-6/"></div></div><div><a data-url="https://www.r-bloggers.com/shiny-server-pro-1-4-6/" data-counturl="https://www.r-bloggers.com/shiny-server-pro-1-4-6/" data-count="vertical" data-text="Shiny Server (Pro) 1.4.6" class="twitter-share-button" data-via="rbloggers" href="https://twitter.com/share"></a></div><div></div></div><div></div></div>
<div>
<div>To <strong>leave a comment</strong> for the author, please follow the link and comment on their blog: <strong><a href="https://blog.rstudio.org/2016/09/22/shiny-server-1-4-6/"> RStudio Blog</a></strong>.</div>
<hr>
<a rel="nofollow" href="https://www.r-bloggers.com/">R-bloggers.com</a> offers <strong><a rel="nofollow" href="https://feedburner.google.com/fb/a/mailverify?uri=RBloggers">daily e-mail updates</a></strong> about <a title="The R Project for Statistical Computing" rel="nofollow" href="https://www.r-project.org/">R</a> news and <a title="R tutorials" rel="nofollow" href="https://www.r-bloggers.com/?s=tutorial">tutorials</a> on topics such as: <a title="Data science" rel="nofollow" href="https://www.r-bloggers.com/?s=data%20science">Data science</a>, <a title="Big Data" rel="nofollow" href="https://www.r-bloggers.com/?s=Big%20Data">Big Data, <a title="R jobs" rel="nofollow" href="https://www.r-users.com/">R jobs</a>, visualization (<a title="ggplot and ggplot2 tutorials" rel="nofollow" href="https://www.r-bloggers.com/?s=ggplot2">ggplot2</a>, <a title="Boxplots using lattice and ggplot2 tutorials" rel="nofollow" href="https://www.r-bloggers.com/?s=boxplot">Boxplots</a>, <a title="Maps and gis" rel="nofollow" href="https://www.r-bloggers.com/?s=map">maps</a>, <a title="Animation in R" rel="nofollow" href="https://www.r-bloggers.com/?s=animation">animation</a>), programming (<a title="RStudio IDE for R" rel="nofollow" href="https://www.r-bloggers.com/?s=RStudio">RStudio</a>, <a title="Sweave and literate programming" rel="nofollow" href="https://www.r-bloggers.com/?s=sweave">Sweave</a>, <a title="LaTeX in R" rel="nofollow" href="https://www.r-bloggers.com/?s=LaTeX">LaTeX</a>, <a title="SQL and databases" rel="nofollow" href="https://www.r-bloggers.com/?s=SQL">SQL</a>, <a title="Eclipse IDE for R" rel="nofollow" href="https://www.r-bloggers.com/?s=eclipse">Eclipse</a>, <a title="git and github, Version Control System" rel="nofollow" href="https://www.r-bloggers.com/?s=git">git</a>, <a title="Large data in R using Hadoop" rel="nofollow" href="https://www.r-bloggers.com/?s=hadoop">hadoop</a>, <a title="Web Scraping of google, facebook, yahoo, twitter and more using R" rel="nofollow" href="https://www.r-bloggers.com/?s=Web+Scraping">Web Scraping</a>) statistics (<a title="Regressions and ANOVA analysis tutorials" rel="nofollow" href="https://www.r-bloggers.com/?s=regression">regression</a>, <a title="principal component analysis tutorial" rel="nofollow" href="https://www.r-bloggers.com/?s=PCA">PCA</a>, <a title="Time series" rel="nofollow" href="https://www.r-bloggers.com/?s=time+series">time series</a>, <a title="finance trading" rel="nofollow" href="https://www.r-bloggers.com/?s=trading">trading</a>) and more...
<img height="1" alt="" width="1" src="http://feeds.feedburner.com/~r/RBloggers/~4/3ZeaM4s66Yc"></a></div>