#15619: Logout link should be protected
-------------------------------+------------------------------------------
Reporter: void | Owner: ashchristopher
Type: Bug | Status: assigned
Component: contrib.admin | Version: master
Severity: Normal | Resolution:
Keywords: | Triage Stage: Accepted
Has patch: 1 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 1
Easy pickings: 0 | UI/UX: 0
-------------------------------+------------------------------------------
Comment (by vzima):
Replying to [comment:26 aaugustin]:
> Congratulations, you've proved you like wasting our time.
>
> Don't be surprised if your comments are ignored from now on.
>
> By the way, this isn't even an proof-of-concept against Django, it's
against Trac.
It is the same problem in Django as is in Trac. It would be very easy to
add a lot fake images to whatever site powered by Django, some are listed
at Django homepage. Or Django Project admin itself :)
{{{
[[Image(https://www.djangoproject.com/admin/logout/)]]
}}}
--
Ticket URL: <https://code.djangoproject.com/ticket/15619#comment:27>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
