Skip to content

Instantly share code, notes, and snippets.

@ikedas
Last active January 16, 2019 05:31
Show Gist options
  • Save ikedas/3e1cbd27d908e4c2953c810b8a24e7ac to your computer and use it in GitHub Desktop.
Save ikedas/3e1cbd27d908e4c2953c810b8a24e7ac to your computer and use it in GitHub Desktop.
Bug #527

URL links appear in mail/web templates

action possiblly invoked by GET uses confirm_action() bug #527
rss/active_lists Yes
add Yes
add_frommod Yes
admin Yes
arc Yes Yes Affected
arc_delete Yes
arc_manage Yes
arcsearch_id Yes Yes Affected
auth Yes Yes Affected
auth_add Yes
auth_del Yes
blacklist Yes
close_list Yes
compose_mail Yes
copy_template Yes
create_automatic_list_request Yes
create_list_request Yes
d_admin Yes
d_control Yes
d_delete Yes Yes Affected
d_editfile Yes
d_properties Yes
d_read Yes
decl_add Yes
decl_del Yes
del Yes
distribute Yes
docindex Yes
dump_scenario Yes
ajax/edit Yes
edit_config Yes
edit_list_request Yes
edit_template Yes
editfile Yes
editsubscriber Yes
export_member Yes
firstpasswd Yes
get_closed_lists Yes
get_inactive_lists Yes
get_latest_lists Yes
get_pending_lists Yes
help Yes
nomenu/help Yes
home Yes
import Yes Yes not yet implemented
including_lists Yes
info Yes
rss/latest_arc Yes
rss/latest_d_read Yes
rss/latest_lists Yes
lists Yes
lists_categories Yes
load_cert Yes
ls_templates Yes
modindex Yes
move_list Yes
move_user Yes
my Yes
open_list Yes
pref Yes
purge_list Yes
renewpasswd Yes
request_topic Yes
remind Yes
remove_arc Yes
remove_template Yes
review Yes
reviewbouncing Yes
rss_request Yes
rt_delete Yes Yes Affected
rt_edit Yes
search_list_request Yes
serveradmin Yes
serveradmin/archives Yes
serveradmin/families Yes
serveradmin/logs Yes
serveradmin/m_lists Yes
serveradmin/templates Yes
serveradmin/tracker Yes
serveradmin/translation Yes
serveradmin/users Yes
serveradmin/vhosts Yes
set_pending_list_request Yes
show_exclude Yes
sigindex Yes
signoff Yes Yes Affected
skinsedit Yes
sso_login Yes
stats Yes
subindex Yes
suboptions Yes
subscribe Yes Yes Not affected. Initially empty form is shown
ticket Yes
tracking Yes
ajax/viewbounce Yes
viewlogs Yes
ajax/viewmod Yes

Usage of URL links is described in documentation

action invoked by GET uses confirm_action() bug #527
auto_signoff Yes Yes Affected
family_signoff_request Yes
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment