#1314 HTTP GET to update_homepage is destructive

v1.0.0
closed
sf-2 (994)
General
nobody
2015-08-20
2011-01-11
Mark Ramm
No

Right now if you hit the link below the home page of the sales_demo project will be deleted. (Well replaced with emptiness)

So, don't go to the page!

https://sf-dbrondsema-5030.sb.sf.net/p/sales-demo/admin/update_homepage

We should make sure that forms like this don't allow updates from HTTP GET requests.

Discussion

  • Mark Ramm - 2011-01-11
    • custom_field__size: --> 1
     
  • Wolf - 2011-01-11
    • status: open --> closed
     
  • Wolf - 2011-01-11

    fixed in 4a9e3ac

     

Log in to post a comment.