Modify ↓

Opened 15 years ago

Last modified 10 years ago

#4942 new defect

comments can be used to change section

Reported by: Michael Ching Owned by: Takanori Suzuki
Priority: normal Component: WorkflowEditorPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.11

Description

You are able to change out of the [ticket-workflow] section by using a '=' after a comment: [trac] # =

Because the other fields written follow a specific form, it does not seem like this can be exploited to write arbitrary settings, but because of the nature of the plugin it should be stricter in the input it accepts.

Attachments (0)

Change History (1)

comment:1 Changed 15 years ago by Takanori Suzuki

Hi, mkc.

Can you attach the error log file?

Modify Ticket

Change Properties
Set your email in Preferences
Action
as new The owner will remain Takanori Suzuki.

Add Comment

E-mail address and name can be saved in the Preferences.

Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.