Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Merge commit 'refs/changes/75/8275/2' of ssh://gerrit.tuleap.net:29418/tuleap into stable

Download Browse

* ssh://gerrit.tuleap.net:29418/tuleap: request #10181: Domain name equivalence is not verified properly in the CSRF protection of the REST API

+32 −5
Nicolas Terray (nterray) 2017-05-04 16:35
Nicolas Terray (nterray) 2017-05-04 16:35
11d9a3a10d77ad141616962a8e29c33b3014c02f
git #tuleap/stable/11d9a3a10d77ad141616962a8e29c33b3014c02f

Modified Files

Side by side diff
Inline diff
Name
M src/common/REST/GateKeeper.class.php +2 −2 Go to diff View file
M tests/simpletest/common/REST/GateKeeperTest.php +28 −1 Go to diff View file
M tools/rpm/tuleap.rhel6.spec +1 −1 Go to diff View file
M tools/rpm/tuleap.rhel7.spec +1 −1 Go to diff View file