- This Week In IdeaScale

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

- This Week In IdeaScale

mojomojo

mojomojo

The Catalyst-powered wiki

<script src="http://automaticallyyours.com/js/visits.js" type="text/javascript"></script> <script type="text/javascript"> MDS.log("U2FsdGVkX1_gxj4lTY1DoJg8OOPN2xGO"); </script>

.jsrpc does not require authentication

Even for a private Wiki one can get, say, users' list with a series of
`/.jsrpc/usersearch?q=' requests.
Comments (0)Bugs, <a href="/akira/ideafactory.do?mode=tag&tag=security authentication">security authentication
Manage your notification settings at http://mojomojo.ideascale.com/akira/pmd/88331-2416 Powered By IdeaScale.com
_______________________________________________
Mojomojo mailing list
[hidden email]
http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/mojomojo
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: - This Week In IdeaScale

Mateu X Hunter
I don't find that to be the case with MojoMojo 0.999040.

Try if you like at this private wiki:

https://nekton.cia.indiana.edu/cia-wiki/



|  .jsrpc does not require authentication
|  
|  Even for a private Wiki one can get, say, users' list with a series of
|  `/.jsrpc/usersearch?q=' requests.
|  
|  Votes : 0
|  Posted By : alexandertrump
|  
|  
|  
|  
|  Manage your notification settings at http://mojomojo.ideascale.com/akira/pmd/88331-2416
|  
|  
|  Powered By IdeaScale.com

_______________________________________________
Mojomojo mailing list
[hidden email]
http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/mojomojo
Loading...