Bookmark plugin should protect add and delete operations
|Reported by:||Jun Omae||Owned by:||Ryan J Ollos|
|Cc:||Jun Omae, Ryan J Ollos, Steffen Hoffmann||Trac Release:||0.12|
The bookmark icon is simple link, not a form. The delete link in bookmark page is also. Therefore, a attacker can force to add and delete the users' bookmarks.
Change History (4)
Note: See TracTickets for help on using tickets.