Modify

Opened 6 years ago

Last modified 5 months ago

#4942 new defect

comments can be used to change section

Reported by: mkc Owned by: takanorig
Priority: normal Component: WorkflowEditorPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.11

Description

You are able to change out of the [ticket-workflow] section by using a '=' after a comment: [trac] # =

Because the other fields written follow a specific form, it does not seem like this can be exploited to write arbitrary settings, but because of the nature of the plugin it should be stricter in the input it accepts.

Attachments (0)

Change History (1)

comment:1 Changed 6 years ago by takanorig

Hi, mkc.

Can you attach the error log file?

Add Comment

Modify Ticket

Action
as new The owner will remain takanorig.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.