[wp-trac] Re: [WordPress Trac] #5272: WordPress allows anonymous user to see slug for private post by guessing post number

WordPress Trac wp-trac at lists.automattic.com
Wed Nov 7 10:10:34 GMT 2007


#5272: WordPress allows anonymous user to see slug for private post by guessing
post number
-------------------------+--------------------------------------------------
 Reporter:  tzafrir      |        Owner:  pishmishy
     Type:  defect       |       Status:  assigned 
 Priority:  normal       |    Milestone:  2.4      
Component:  General      |      Version:  2.3.1    
 Severity:  major        |   Resolution:           
 Keywords:  needs-patch  |  
-------------------------+--------------------------------------------------
Changes (by pishmishy):

  * owner:  anonymous => pishmishy
  * status:  new => assigned

Comment:

 Confirming that the bug exists in trunk. Worth fixing as the slug may have
 been automatically derived from post data that the user didn't want to
 disclose.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/5272#comment:3>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list