Modify

Opened 9 years ago

Closed 7 years ago

#118 closed defect (wontfix)

SecSession doesn't lock other plugins to https

Reported by: pacopablo Owned by: pacopablo
Priority: normal Component: SecSessionPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.8

Description

If an authenticated user is viewing a plugin page and cahnges the URL to http instead of https, secsession doesn't catch it.

Attachments (0)

Change History (1)

comment:1 Changed 7 years ago by pacopablo

  • Resolution set to wontfix
  • Status changed from new to closed
  • Trac Release set to 0.8

plugin is dead and gone for now. Besides, this is non-trivial to fix for 0.9 as there is no plugin loading order, nor any pre-request hooks.

Add Comment

Modify Ticket

Action
as closed The owner will remain pacopablo.
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.