Make WordPress Core

Opened 19 years ago

Closed 19 years ago

#1040 closed defect (bug) (fixed)

RSS enclosures do not respect password protected post

Reported by: anonymousbugger's profile anonymousbugger Owned by: ryan's profile ryan
Milestone: Priority: normal
Severity: major Version: 1.5.1
Component: Security Keywords:
Focuses: Cc:


When posting a password protected post and including files inside,
rss 2.0 feed does output all enclosures, even though password has not been entered yet.

Attachments (1)

rss_enclosure_password.patch (545 bytes) - added by anonymousbugger 19 years ago.

Download all attachments as: .zip

Change History (5)

#1 @anonymousbugger
19 years ago

  • Patch set to No

#2 @ryan
19 years ago

  • Patch changed from No to Yes

#3 @ringmaster
19 years ago

A bug in the previously specified patch only includes enclosures if there's a password on the post.

The new patch (rss_enclosure_password.patch) includes enclosures on unprotected posts or on protected posts when the post password cookie is properly set. Without the post password cookie, the enclosure is not included in the feed.

#4 @ryan
19 years ago

  • fixed_in_version set to 1.5.1
  • Owner changed from anonymous to rboren
  • Resolution changed from 10 to 20
  • Status changed from new to closed
Note: See TracTickets for help on using tickets.