portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Joachim Müller <joac...@wemove.com>
Subject Re: Security Issue: pipeline can be set via request parameter
Date Wed, 22 Oct 2008 08:39:34 GMT
Hi David.

I've attached a patch here

https://issues.apache.org/jira/browse/JS2-914

If the request parameter "pipeline" is not used anymore, maybe the best
solution is to remove the logic from JetspeedEngine.java


Best Regards!
Joachim


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Mime
View raw message