Opened 20 years ago
Closed 20 years ago
#1040 closed defect (bug) (fixed)
RSS enclosures do not respect password protected post
| Reported by: |
|
Owned by: |
|
|---|---|---|---|
| Milestone: | Priority: | normal | |
| Severity: | major | Version: | 1.5.1 |
| Component: | Security | Keywords: | |
| Focuses: | Cc: |
Description
When posting a password protected post and including files inside,
rss 2.0 feed does output all enclosures, even though password has not been entered yet.
Attachments (1)
Change History (5)
Note: See
TracTickets for help on using
tickets.
A bug in the previously specified patch only includes enclosures if there's a password on the post.
The new patch (rss_enclosure_password.patch) includes enclosures on unprotected posts or on protected posts when the post password cookie is properly set. Without the post password cookie, the enclosure is not included in the feed.