New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Properly check email and session id in authenticateAndRun SOAP call (#1041) #1044

Merged

ikedas merged 1 commit into sympa-community:sympa-6.2 from racke:pr/soap-api-access-fix

Dec 7, 2020

Contributor

racke commented Nov 27, 2020

Fix the defects in the current check:

Allows bogus session id
Allows session id which belongs to different user

May fix #1041.


          Properly check email and session id in authenticateAndRun SOAP call (s…

52157b5

…ympa-community#1041).

racke added bug security labels

Member

ikedas commented Dec 1, 2020

Let's try it out with the next beta.

ikedas merged commit 4dacc82 into sympa-community:sympa-6.2

racke deleted the pr/soap-api-access-fix branch

December 15, 2020 11:23

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels