NOTE: If you are a developer, please use a private wiki based on foswiki/trunk on a daily base ...or use
trunk.foswiki.org to view this page for some minimal testing.
Use
Item9693 for docu changes for 1.2 and 2.0.
Item2551: The strikeone action parameter name clashes with manage script
| Priority: |
CurrentState: |
AppliesTo: |
Component: |
WaitingFor: |
| Normal |
Closed |
Engine |
|
Main.KennethLavrsen |
When the strikeone CSRF protection was implemented a variable called 'action' was used which would have the value 'validate' when you save.
But this prevents good use of the same feature for other scripts than save because they have their own action. For example manage uses action for several tasks.
I will rename the CSRF action to 'validate' still with the value 'validate'. This way the two feature can live hand in hand and we can protect even more actions with the brilliant strikeone protection.
--
KennethLavrsen - 02 Jan 2010
I can close this one as this is not relevant for trunk.
--
KennethLavrsen - 02 Jan 2010