snoopdave opened a new pull request, #227: URL: https://github.com/apache/roller/pull/227
The salt check now covers Struts action methods called by GET: - A request that is not a POST and calls an action method other than a display method (`execute`, `input`, `view`, `search`, `query`, `edit`, `cancel` and a few redirect targets) must carry a valid salt, as a POST does. - The links that change data by GET (ping enable, disable and send, global ping target enable and disable, and accepting or declining a weblog invitation) now carry the salt. Tests: three new cases in `ValidateSaltInterceptorTest`. Full build and tests pass on JDK 11. On a local build the ping links work, each salt works once, and the main menu loads; the invitation links were not tried. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
