You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@continuum.apache.org by "Brett Porter (JIRA)" <ji...@codehaus.org> on 2011/02/01 15:37:22 UTC

[jira] Closed: (CONTINUUM-2604) extremecomponents table should use autoIncludeParameters="false"

     [ http://jira.codehaus.org/browse/CONTINUUM-2604?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brett Porter closed CONTINUUM-2604.
-----------------------------------

    Resolution: Fixed

> extremecomponents table should use autoIncludeParameters="false"
> ----------------------------------------------------------------
>
>                 Key: CONTINUUM-2604
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-2604
>             Project: Continuum
>          Issue Type: Bug
>          Components: Web - UI
>    Affects Versions: 1.3.6, 1.4.0 (Beta)
>            Reporter: Brett Porter
>            Assignee: Brett Porter
>             Fix For: 1.3.7, 1.4.1 (Beta)
>
>
> this allows users to pass anything in to the page via arbitrary request parameters and should be disabled.
> It's unclear if the default of true was relied upon - my testing has not yielded any problems

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira