Skip to content
Snippets Groups Projects
  1. Jan 07, 2019
  2. Jan 06, 2019
  3. Jan 04, 2019
  4. Jan 02, 2019
  5. Dec 26, 2018
  6. Dec 22, 2018
  7. Dec 15, 2018
  8. Dec 13, 2018
  9. Dec 12, 2018
  10. Dec 10, 2018
  11. Dec 08, 2018
  12. Dec 04, 2018
  13. Nov 29, 2018
    • Michael Hamann's avatar
      Security: Fix ACL check in search_allpages · 77244e70
      Michael Hamann authored
      Due to the changes in 8f34cf3d, the ACL
      check in search_allpages was only executed when 'skipacl' has been
      explicitly set to false. Otherwise, only ACLs for namespaces were
      checked (unless the sneakyacl option was passed). The documentation
      states that the default for 'skipacl' is false, so setting it to false
      shouldn't be necessary.
      
      From all I can see, this does not concern DokuWiki itself as
      search_allpages is never used without the 'skipacl' option explicitly
      set to true or false. However, this causes serious security issues in
      plugins that rely on this ACL check in search_allpages like the include
      plugin.
      77244e70
  14. Nov 28, 2018
  15. Nov 27, 2018
  16. Nov 25, 2018
  17. Nov 24, 2018
  18. Nov 23, 2018
Loading