XWiki Calendar Application

Add CSRF protection to calendar application

Details

  • Type: Task Task
  • Status: Closed Closed
  • Priority: Major Major
  • Resolution: Fixed
  • Affects Version/s: 1.2
  • Fix Version/s: 1.2
  • Component/s: None
  • Labels:
    None
  • keywords:
    security, csrf
  • Similar issues:
    XACALENDAR-1Create initial version of the calendar application
    XACALENDAR-3Add iCalendar import/export functionality, and publish/subscribe such as in Mozilla Sunbird
    XACALENDAR-8Calendar Plugin API improvements
    XACALENDAR-7Calendar AJAX Improvements
    XACALENDAR-10Modify default start/end dates format to include time information (HH:mm)
    XACALENDAR-14Make the calendar use the current Color Theme and add custom styles to make it look better
    XACALENDAR-4Provide a datepicker widget for creating events in the event calendar
    XACALENDAR-2 Create initial version of the calendar plugin
    XACALENDAR-13Display events start/end time in the calendar
    XACALENDAR-9Improvement for next and previous month from "<" and ">" to "< previous" and "next >"

Description

All affected forms and links will need to include the token as a parameter. Scripts that modify data will need to check the token first. See XWIKI-4873.

Issue Links

blocks

Sub-task - The sub-task of the issue XWIKI-5463 Fix all applications to use CSRF tokens

  • Major - Major loss of function.
  • Closed - The issue is considered finished, the resolution is correct and has been pushed to production. Issues which are not closed can be reopened.

Activity

Hide
Permalink
Alex Busenius added a comment -

Done in r31403.

Show
Alex Busenius added a comment - Done in r31403.

People

  • Assignee:
    Alex Busenius
    Reporter:
    Alex Busenius
Vote (0)
Watch (0)

Dates

  • Created:
    Updated:
    Resolved: