Modify

Opened 9 years ago

Closed 6 years ago

#118 closed defect (wontfix)

SecSession doesn't lock other plugins to https

Reported by: pacopablo Owned by: pacopablo
Priority: normal Component: SecSessionPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.8

Description

If an authenticated user is viewing a plugin page and cahnges the URL to http instead of https, secsession doesn't catch it.

Attachments (0)

Change History (1)

comment:1 Changed 6 years ago by pacopablo

  • Resolution set to wontfix
  • Status changed from new to closed
  • Trac Release set to 0.8

plugin is dead and gone for now. Besides, this is non-trivial to fix for 0.9 as there is no plugin loading order, nor any pre-request hooks.

Add Comment

Modify Ticket

Action
as closed .
as The resolution will be set. Next status will be 'closed'.
to The owner will be changed from pacopablo. Next status will be 'closed'.
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.