deac/instiki
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity
538 commits 3 branches 18 tags 34 MiB
Commit graph

1 commit

Author SHA1 Message Date
Jacques Distler 2484542f12 Security: HTTP GET Bypassed Spam Protection 
Apparently, the form_spam_protect plugin only works with HTTP POST, not GET.
Unsafe operations (save and file-upload) should be POSTs anyway.
Fixed.

Also, two broken tests fixed. Only two Unit Tests now fail: both are minor bugs in XHTMLDiff.
 2007-10-07 01:59:50 -05:00