Opened 5 years ago

Closed 5 years ago

Last modified 5 years ago

#5535 closed defect (bug) (fixed)

Limit post_password exposure in XML-RPC metaWeblog.getRecentPosts

Reported by: josephscott Owned by: anonymous
Priority: normal Milestone: 2.3.2
Component: XML-RPC Version: 2.3.2
Severity: normal Keywords: has-patch
Cc: josephscott

Description

Add checks to metaWeblog.getRecentPosts so that only users who can edit a post will be provided a post_password, if one is set.

Attachments (1)

xmlrpc.php.diff​ (589 bytes) - added by josephscott 5 years ago.

Download all attachments as: .zip

Change History (4)

josephscott — 5 years ago

comment:1   ryan — 5 years ago

  • Resolution set to fixed
  • Status changed from new to closed

(In [6496]) Limit post_password exposure. Props josephscott for the patch and xknown for the find. fixes #5535 for 2.4

comment:2   ryan — 5 years ago

(In [6497]) Limit post_password exposure. Props josephscott for the patch and xknown for the find. fixes #5535 for 2.3

comment:3   ryan — 5 years ago

  • Milestone changed from 2.4 to 2.3.2
Note: See TracTickets for help on using tickets.