6.0.0-beta6
▾
Tasks
New Task
Search
Photos
Wiki
▾
Tickets
New Ticket
Search
dev.horde.org
Toggle Alerts Log
Help
4/10/26
H
istory
A
ttachments
C
omment
W
atch
Download
Comment on [#5307] Upgrade Prototype to 1.5.1_rc3 and make use of CSRF protection
*
Your Email Address
*
Spam protection
Enter the letters below:
.__ .__ .__ . __ | \[__)[__)| / ` |__/| | |___\__.
Comment
> http://prototypejs.org/2007/4/24/release-candidate-3 > > > > It'd be good to add a security delimiter of some sort to our ajax, > also, taking advantage of the support in rc3 for stripping them > before eval'ing. See > http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf and > http://dev.rubyonrails.org/ticket/7910
Attachment
Watch this ticket
N
ew Ticket
M
y Tickets
S
earch
Q
uery Builder
R
eports
Saved Queries
Open Bugs
Bugs waiting for Feedback
Open Bugs in Releases
Open Enhancements
Enhancements waiting for Feedback
Bugs with Patches
Enhancements with Patches
Release Showstoppers
Stalled Tickets
New Tickets
Horde 5 Showstoppers