Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Request Tracker: Commit

rt branch, 3.8/csrf-whitelist-calpopup, created. rt-3.8.13-2-gf67496d

 

 

Request Tracker commit RSS feed   Index | Next | Previous | View Threaded


sunnavy at bestpractical

May 30, 2012, 1:09 PM

Post #1 of 1 (101 views)
Permalink
rt branch, 3.8/csrf-whitelist-calpopup, created. rt-3.8.13-2-gf67496d

The branch, 3.8/csrf-whitelist-calpopup has been created
at f67496d413c779b3f017dff09a67d86cf5409c0f (commit)

- Log -----------------------------------------------------------------
commit f67496d413c779b3f017dff09a67d86cf5409c0f
Author: sunnavy <sunnavy [at] bestpractical>
Date: Thu May 31 04:02:43 2012 +0800

whitelist CalPopup page to make ie happy

diff --git a/lib/RT/Interface/Web.pm b/lib/RT/Interface/Web.pm
index fd4be73..fc7ea38 100755
--- a/lib/RT/Interface/Web.pm
+++ b/lib/RT/Interface/Web.pm
@@ -1031,6 +1031,10 @@ our %is_whitelisted_component = (
# information for the search. Because it's a straight-up read, in
# addition to embedding its own auth, it's fine.
'/NoAuth/rss/dhandler' => 1,
+
+ # IE doesn't send referer in window.open()
+ # besides, as a harmless calendar select page, it's fine
+ '/Helpers/CalPopup.html' => 1,
);

sub IsCompCSRFWhitelisted {

-----------------------------------------------------------------------
_______________________________________________
Rt-commit mailing list
Rt-commit [at] lists
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-commit

Request Tracker commit RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.