Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-4873 Security issue: Editing pages using URL
  3. XWIKI-5461

Move CSRF token component to platform

    XMLWordPrintable

Details

    • Sub-task
    • Resolution: Fixed
    • Major
    • 2.5 M2
    • 2.5 M1
    • {Unused} Core
    • None
    • Unit
    • Easy

    Description

      The implementation of the secret token component:
      https://svn.xwiki.org/svnroot/xwiki/contrib/sandbox/xwiki-csrftoken

      A template "resubmit.vm" will need to be added to web/standard/**/templates/

      Attachments

        Issue Links

          causes

          Security - Security bug with confidential level XWIKI-20343 RXSS via resubmit & xback parameters

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Activity

            People

              nickless Alex Busenius
              nickless Alex Busenius
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: