[dokuwiki] darcs changes 2009-05-28
- From: andi@xxxxxxxxxxxxxx (Andreas Gohr)
- To: dokuwiki@xxxxxxxxxxxxx
- Date: Thu, 28 May 2009 04:00:03 +0200 (CEST)
Good Morning!
This are the darcs changes for DokuWiki committed
yesterday. Please test them and report bugs.
---------------------------------------------------------------------
Wed May 27 13:22:43 CEST 2009 Andreas Gohr <andi[at]splitbrain.org>
* Don't check for CSRF attacks when no user is logged in FS#1619
Ignore-this: 3ef4fafa34a7bbba76435b5db6935b57
There is no need to fight against a privilege stealing attack when the
attacked user has no privileges.
Skipping the check reenables editing without cookies again.
---------------------------------------------------------------------
Single patches can be downloaded from
http://dev.splitbrain.org/darcs/index.cgi/dokuwiki/?c=patches
Bye,
your darcs changelog mailer
--
DokuWiki mailing list - more info at
http://wiki.splitbrain.org/wiki:mailinglist
Other related posts:
- » [dokuwiki] darcs changes 2009-05-28 - Andreas Gohr
