[buddypress-trac] [BuddyPress] #2747: bp_has_* templatetag functions should not use $_REQUEST['s'] without further verification

buddypress-trac at lists.automattic.com buddypress-trac at lists.automattic.com
Fri Nov 19 19:39:30 UTC 2010


#2747: bp_has_* templatetag functions should not use $_REQUEST['s'] without
further verification
------------------------+---------------------------------------------------
  Reporter:  calvin_42  |       Owner:  DJPaul
      Type:  defect     |      Status:  closed
  Priority:  normal     |   Milestone:  1.3   
 Component:  Core       |     Version:  1.2.5 
Resolution:  fixed      |    Keywords:        
------------------------+---------------------------------------------------
Changes (by djpaul):

  * status:  assigned => closed
  * resolution:  => fixed


Comment:

 (In [3448]) Don't allow the URL to override search parameters hardcoded in
 templates. Fixes #2747.

-- 
Ticket URL: </ticket/2747#comment:2>
BuddyPress <http://buddypress.org/>
BuddyPress


More information about the buddypress-trac mailing list