Ingo Schommer 5bc0d008e9 BUGFIX Avoid privilege escalation from EDIT_PERMISSIONS to ADMIN through TreeMultiselectField (in Member->getCMSFields()) by checking for admin groups in Member->onChangeGroups()

2011-10-18 09:56:00 +02:00

..

GroupTest.php

MINOR: Fixes to GroupTest to handle canEdit() restrictions on the groups

2011-02-02 14:27:19 +13:00

GroupTest.yml

MINOR: Fixes to GroupTest to handle canEdit() restrictions on the groups

2011-02-02 14:27:19 +13:00

MemberTest.php

BUGFIX Avoid privilege escalation from EDIT_PERMISSIONS to ADMIN through TreeMultiselectField (in Member->getCMSFields()) by checking for admin groups in Member->onChangeGroups()

2011-10-18 09:56:00 +02:00

MemberTest.yml

BUGFIX Avoid privilege escalation from EDIT_PERMISSIONS to ADMIN through TreeMultiselectField (in Member->getCMSFields()) by checking for admin groups in Member->onChangeGroups()

2011-10-18 09:56:00 +02:00

RandomGeneratorTest.php

ENHANCEMENT Added RandomGenerator for more secure CRSF tokens etc. (from r114497) (from r114499)

2011-02-02 14:27:38 +13:00

SecurityTest.php

BUGFIX Avoid potential referer leaking in Security->changepassword() form by storing Member->AutoLoginHash in session instead of 'h' GET parameter (from r114758)

2011-02-02 14:27:38 +13:00

SecurityTokenTest.php

MINOR Fixed HTTPRequest class usage (regression from r113293)

2011-02-02 14:27:37 +13:00