mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-10-22 14:05:37 +02:00
f06ba70fc9
Controller (and subclasses) failed to enforce $allowed_action restrictions on parent classes if a child class didn't have it explicitly defined. Controllers which are extended with $allowed_actions (through an Extension) now deny access to methods defined on the controller, unless this class also has them in its own $allowed_actions definition. |
||
|---|---|---|
| .. | ||
| injector | ||
| ContentNegotiator.php | ||
| Controller.php | ||
| Cookie.php | ||
| Director.php | ||
| HTTP.php | ||
| HTTPRequest.php | ||
| HTTPResponse.php | ||
| NullHTTPRequest.php | ||
| PjaxResponseNegotiator.php | ||
| RequestFilter.php | ||
| RequestHandler.php | ||
| RequestProcessor.php | ||
| Session.php | ||