Tickets :: Comment on [#12796] Several Cross Site Request Forgery in Rule Section

* Your Email Address
* Spam protection	Enter the letters below: .___.. . ..___..__. \| \|__\| \| \| [__] \| \| \|\__\| \| \| \|
Comment	> Changes have been made in Git (master): > > commit e5c585867f908322346b37b43ef6460e7d0096c8 > Author: Michael M Slusarz <slusarz@horde.org> > Date: Thu Oct 24 23:42:23 2013 -0600 > > [mms] SECURITY: Protect against CSRF attacks by using tokens on > destructive actions (CVE-2013-6275; Bug #12796; Marcela Benetrix > <m.benetrix@e-secure.com.au>). > > ingo/docs/CHANGES \| 3 ++ > ingo/lib/Basic/Base.php \| 52 > ++++++++++++++++++++++++++++++++++++++++++ > ingo/lib/Basic/Blacklist.php \| 7 ++++- > ingo/lib/Basic/Filters.php \| 16 ++++++++++-- > ingo/lib/Basic/Forward.php \| 3 +- > ingo/lib/Basic/Rule.php \| 17 +++++++++---- > ingo/lib/Basic/Script.php \| 12 +++++++-- > ingo/lib/Basic/Spam.php \| 3 +- > ingo/lib/Basic/Vacation.php \| 3 +- > ingo/lib/Basic/Whitelist.php \| 7 ++++- > ingo/package.xml \| 4 +- > 11 files changed, 107 insertions(+), 20 deletions(-) > > http://git.horde.org/horde-git/-/commit/e5c585867f908322346b37b43ef6460e7d0096c8
Attachment
Watch this ticket