Skip to content
Snippets Groups Projects
  1. Jan 04, 2019
  2. Jan 02, 2019
  3. Dec 26, 2018
  4. Dec 13, 2018
  5. Dec 12, 2018
  6. Dec 10, 2018
  7. Dec 04, 2018
  8. Nov 29, 2018
    • Michael Hamann's avatar
      Security: Fix ACL check in search_allpages · 77244e70
      Michael Hamann authored
      Due to the changes in 8f34cf3d, the ACL
      check in search_allpages was only executed when 'skipacl' has been
      explicitly set to false. Otherwise, only ACLs for namespaces were
      checked (unless the sneakyacl option was passed). The documentation
      states that the default for 'skipacl' is false, so setting it to false
      shouldn't be necessary.
      
      From all I can see, this does not concern DokuWiki itself as
      search_allpages is never used without the 'skipacl' option explicitly
      set to true or false. However, this causes serious security issues in
      plugins that rely on this ACL check in search_allpages like the include
      plugin.
      77244e70
  9. Nov 28, 2018
  10. Nov 27, 2018
  11. Nov 25, 2018
  12. Nov 24, 2018
  13. Nov 23, 2018
  14. Nov 22, 2018
  15. Nov 21, 2018
  16. Nov 20, 2018
Loading