[Rt-commit] rt branch, 4.0/whitelist-search-results, updated. rt-4.0.6-255-gf115f86
Kevin Falcone
falcone at bestpractical.com
Tue Aug 14 18:28:43 EDT 2012
The branch, 4.0/whitelist-search-results has been updated
via f115f86aaf6b7495e87545398ee4fea951a7a04b (commit)
from 75a91cc3441fe1f71ea07d62a6dae4a5762b5562 (commit)
Summary of changes:
lib/RT/Interface/Web.pm | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
- Log -----------------------------------------------------------------
commit f115f86aaf6b7495e87545398ee4fea951a7a04b
Author: Kevin Falcone <falcone at bestpractical.com>
Date: Tue Aug 14 18:28:19 2012 -0400
Whitelist /m/tickets/search
Mobile searches are just as bookmarkable as full searches.
diff --git a/lib/RT/Interface/Web.pm b/lib/RT/Interface/Web.pm
index 93e19c6..9052602 100644
--- a/lib/RT/Interface/Web.pm
+++ b/lib/RT/Interface/Web.pm
@@ -1180,12 +1180,13 @@ our %is_whitelisted_component = (
# addition to embedding its own auth, it's fine.
'/NoAuth/rss/dhandler' => 1,
- # While both of these can be used for denial-of-service against RT
+ # While these can be used for denial-of-service against RT
# (construct a very inefficient query and trick lots of users into
# running them against RT) it's incredibly useful to be able to link
# to a search result or bookmark a result page.
'/Search/Results.html' => 1,
'/Search/Simple.html' => 1,
+ '/m/tickets/search' => 1,
);
sub IsCompCSRFWhitelisted {
-----------------------------------------------------------------------
More information about the Rt-commit
mailing list