cross
New Foswiki release 2.1.6 is available with important security fixes.
Sourceforge foswiki email lists being discontinued. Subscribe to the new Foswiki announce and discuss lists at MailingLists
You are here: Foswiki>Tasks Web>Item1844 (20 Aug 2009, MichaelDaum)Edit Attach

Item1844: WebCreateNewTopic needs method=post

pencil
Priority: Urgent
Current State: Closed
Released In: 1.0.7
Target Release: patch
Applies To: Extension
Component: NatSkin
Branches:
Reported By: OlivierRaginel
Waiting For:
Last Change By: MichaelDaum
It's been fixed in core, but not in NatSkin.

Micha, as it's your plugin, I won't commit anything to it, but here is the patch:
diff --git a/NatSkin/data/System/NatSkinWebCreateNewTopicTemplate.txt b/NatSkin/data/System/NatSkinWebCreateNewTopicTemplate.txt
index d89bf9d..0db4490 100644
--- a/NatSkin/data/System/NatSkinWebCreateNewTopicTemplate.txt
+++ b/NatSkin/data/System/NatSkinWebCreateNewTopicTemplate.txt
@@ -85,7 +85,7 @@
 <!-- //formbuttons -->%TMPL:END%
 
 %TMPL:DEF{"formstart"}%<!-- formstart -->
-<form name="newTopicForm" id="newTopicForm" action="%SCRIPTURLPATH{edit}%/%BASEWEB%/">
+<form name="newTopicForm" id="newTopicForm" action="%SCRIPTURLPATH{edit}%/%BASEWEB%/" method="post">
 <input type="hidden" name="t" value="%GMTIME{"$epoch"}%" />
 <input type="hidden" name="onlynewtopic" value="on" />
 <!-- //formstart -->%TMPL:END%

-- OlivierRaginel - 22 Jul 2009

Fixed in Item8250.

-- MichaelDaum - 20 Aug 2009

ItemTemplate edit

Summary WebCreateNewTopic needs method=post
ReportedBy OlivierRaginel
Codebase trunk
SVN Range Foswiki-1.0.0, Thu, 08 Jan 2009, build 1878
AppliesTo Extension
Component NatSkin
Priority Urgent
CurrentState Closed
WaitingFor
Checkins NatSkin:4cbf0fdddb8d
TargetRelease patch
ReleasedIn 1.0.7
Topic revision: r2 - 20 Aug 2009, MichaelDaum - This page was cached on 26 May 2018 - 19:58.

The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy