continuum-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Brett Porter (JIRA)" <j...@codehaus.org>
Subject [jira] Created: (CONTINUUM-2604) extremecomponents table should use autoIncludeParameters="false"
Date Tue, 01 Feb 2011 13:31:22 GMT
extremecomponents table should use autoIncludeParameters="false"
----------------------------------------------------------------

                 Key: CONTINUUM-2604
                 URL: http://jira.codehaus.org/browse/CONTINUUM-2604
             Project: Continuum
          Issue Type: Bug
          Components: Web - UI
    Affects Versions: 1.4.0 (Beta), 1.3.6
            Reporter: Brett Porter


this allows users to pass anything in to the page via arbitrary request parameters and should
be disabled.

It's unclear if the default of true was relied upon - my testing has not yielded any problems

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message