Actions
bug #9220
closedadapt dataportal to /registrationDTO now using identifier as query parameter and secure against CVE-2007-0450 vulnerability
Status:
Closed
Priority:
Highest
Assignee:
Category:
cdm-dataportal
Target version:
Start date:
Due date:
% Done:
100%
Estimated time:
Severity:
normal
Found in Version:
Description
A)
the registration page must be secured against CVE-2007-0450 by using an identifier query parameter.
B)
after solving #9218: adapt dataportal to /registrationDTO & /registration now using identifier as query parameter
http://cdmserver.org/registrationDTO?identifier=http://testbank.org/100001 http://cdmserver.org/registration/status?identifier=http://testbank.org/100001
Related issues
Actions