获取加密文章安全问题 #269

Closed
yuanpan365 opened this Issue Jun 28, 2013 · 0 comments

Projects

None yet

2 participants

@yuanpan365

http://aa.b3log.org/get-article-content?id=1371958425988 这样直接获取了加密的博客全文。

在neoease 这个主题里面
article-list.ftl 这个里面有一个js方法getArticle(this, '${article.oId}'); 这个都直接把加密文章给获取出来了。

@88250 88250 was assigned Jun 28, 2013
@88250 88250 added a commit that referenced this issue Jun 28, 2013
@88250 88250 Fixed #269 86bd748
@88250 88250 closed this Jun 28, 2013
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment