topic=http://anysite.com
to redirect to any site. This is a feature documented at TWiki:TWiki04/TWikiSkins#The_Go_Box_and_Navigation_Box
Fix: Make the topic=url feature aware of the {AllowRedirectUrl} configure flag.
-- PTh
4.1.0 released
KJL
ItemTemplate | |
---|---|
Summary | Security: Make topic="" parameter aware of {AllowRedirectUrl} configure flag |
ReportedBy | TWiki:Main.PeterThoeny |
Codebase | ~twiki4 |
SVN Range | TWiki-4.1, Thu, 14 Dec 2006, build 12269 |
AppliesTo | Engine |
Component | |
Priority | Urgent |
CurrentState | Closed |
WaitingFor | |
Checkins | 12291 |
TargetRelease | minor |