You are here: Foswiki>Tasks Web>Component>FoswikiNet>Item15182 (06 Aug 2023, MichaelDaum)Edit Attach

Item15182: restricted allowed protocols to http and https

pencil
Priority: Security
Current State: Closed
Released In: 2.1.8
Target Release: patch
Applies To: Engine
Component: FoswikiNet
Branches: Release02x01 master
Reported By: MichaelDaum
Waiting For:
Last Change By: MichaelDaum
I.e. don't allow file:// for security reasons. Actually any code using LWP::UserAgent should strongly consider which protocols are allowed.

-- MichaelDaum - 06 Feb 2023

 

ItemTemplate edit

Summary restricted allowed protocols to http and https
ReportedBy MichaelDaum
Codebase
SVN Range
AppliesTo Engine
Component FoswikiNet
Priority Security
CurrentState Closed
WaitingFor
Checkins distro:357990f007c8 distro:f120bba62acf
TargetRelease patch
ReleasedIn 2.1.8
CheckinsOnBranches Release02x01 master
trunkCheckins
masterCheckins distro:f120bba62acf
ItemBranchCheckins
Release02x01Checkins distro:357990f007c8
Release02x00Checkins
Release01x01Checkins
Edit  | Attach | Print version | History: r2 < r1 | Backlinks | View wiki text | Edit wiki text | More topic actions
Topic revision: r2 - 06 Aug 2023, MichaelDaum
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy