[Tickets #12803] Re: CSRF and XSS in in Save search as a virtual address book

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/12803
------------------------------------------------------------------------------
  Ticket             | 12803
  Updated By         | Git Commit <commits at lists.horde.org>
  Summary            | CSRF and XSS in in Save search as a virtual address
                     | book
  Queue              | Turba
  Version            | 4.1.2
  Type               | Bug
  State              | Unconfirmed
  Priority           | 3. High
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


Git Commit <commits at lists.horde.org> (2013-10-29 11:19) wrote:

Changes have been made in Git (master):

commit 74f9add4ad86c29b608270e33b17426163b3c8cf
Author: Jan Schneider <jan at horde.org>
Date:   Tue Oct 29 12:19:06 2013 +0100

     Token-protect vbook form (Bug #12803).

  turba/search.php                      |   67  
+++++++++++++++++++--------------
  turba/templates/search/vbook.html.php |    1 +
  2 files changed, 40 insertions(+), 28 deletions(-)

http://git.horde.org/horde-git/-/commit/74f9add4ad86c29b608270e33b17426163b3c8cf