Feeling Lucky
?
[#29045] - Add CSRF prevention to com_postinstall
- Fixed in Code Base
- 14 May 2020
- Medium
- Build: staging
- # 29045
- Diff
- zero-24:token_postinstall
- Pending Hound Hound is busy sniffing around... Details
User tests: Successful: Unsuccessful:
Summary of Changes
Add CSRF prevention to com_postinstall
Testing Instructions
- login to the backend
- go to com_postinstall
- make sure the "reset all messages" button works
- make sure the "hide all messages" button works
- use the "activate 2fa action" button and make sure it still works too
Expected result
All buttons have csrf protection
Actual result
Two buttons did not had an csrf protection.
Documentation Changes Required
none
Original report to the JSST by Khoa Bùi Đức Anh
| Status | New | ⇒ | Pending |
joomla-cms-bot
- | Category | ⇒ | Administration com_postinstall |
| Labels |
Added:
?
|
||
pmleconte
- comment
- 14 May 2020
I have tested this item
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/29045.
richard67
- | Status | Pending | ⇒ | Fixed in Code Base |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2020-05-14 12:42:58 |
| Closed_By | ⇒ | richard67 |
zero-24
- comment
- 14 May 2020
Thanks for the tests and the merge
I have tested this item✅ successfully on 77c2c22
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/29045.