Bookmark plugin should protect add and delete operations
|Reported by:||jun66j5||Owned by:||rjollos|
|Cc:||jun66j5, rjollos, hasienda||Trac Release:||0.12|
The bookmark icon is simple link, not a form. The delete link in bookmark page is also.
Therefore, a attacker can force to add and delete the users' bookmarks.
Change History (4)
comment:3 Changed 7 months ago by rjollos
- Owner changed from saigon to rjollos
- Status changed from new to assigned
Note: See TracTickets for help on using tickets.