- This Week In IdeaScale

[mojomojo]

Some javascript/style in this post has been disabled (why?)

mojomojo

The Catalyst-powered wiki

.jsrpc does not require authentication

0 Vote On Idea

Even for a private Wiki one can get, say, users' list with a series of `/.jsrpc/usersearch?q=' requests. Comments (0)Bugs, security authentication

Manage your notification settings at http://mojomojo.ideascale.com/akira/pmd/88331-2416 Powered By IdeaScale.com
_______________________________________________
Mojomojo mailing list
[hidden email]
http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/mojomojo

[Mateu X Hunter]

I don't find that to be the case with MojoMojo 0.999040.

Try if you like at this private wiki:

https://nekton.cia.indiana.edu/cia-wiki/



|  .jsrpc does not require authentication
|  
|  Even for a private Wiki one can get, say, users' list with a series of
|  `/.jsrpc/usersearch?q=' requests.
|  
|  Votes : 0
|  Posted By : alexandertrump
|  
|  
|  
|  
|  Manage your notification settings at http://mojomojo.ideascale.com/akira/pmd/88331-2416
|  
|  
|  Powered By IdeaScale.com

_______________________________________________
Mojomojo mailing list
[hidden email]
http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/mojomojo