Homec4science

Added user-query check when setting up alerts.

Authored by Tibor Simko <tibor.simko@cern.ch> on Jun 15 2010, 22:12.

Description

Added user-query check when setting up alerts.

Added a strict check whether the given user can set up the given query
as a periodic alert. This prevents malicious users from playing with
URL arguments.

Conflicts:

modules/webalert/lib/webalert.py
modules/webalert/lib/webalert_webinterface.py

Details

Committed
Tibor Simko <tibor.simko@cern.ch>Jun 15 2010, 22:12
Parents
R3600:152ef0530527: WebSubmit: fix create_error_box call in errorMsg
Branches
Unknown
Tags
Unknown

Event Timeline

Tibor Simko <tibor.simko@cern.ch> committed R3600:99aa178ff8ce: Added user-query check when setting up alerts. (authored by Tibor Simko <tibor.simko@cern.ch>).Jun 15 2010, 22:12