[Koha-bugs] [Bug 21325] Prevent authentication when sending userid and password via querystring parameters

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Mon Apr 19 02:17:19 CEST 2021


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21325

David Cook <dcook at prosentient.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Text to go in the|                            |This change may break
      release notes|                            |custom or creative (yet
                   |                            |insecure) authentication
                   |                            |integration using GET
                   |                            |requests. These auth
                   |                            |requests do not exist in
                   |                            |Koha, but they may be used
                   |                            |by extensions,
                   |                            |customizations, or clever
                   |                            |end users.

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list