[Nuxeo-tickets] Re: [Nuxeo Repository] #630: Don't use GET for side effects, use POST

[Nuxeo Repository]

#630: Don't use GET for side effects, use POST
--------------------------+-------------------------------------------------
 Reporter:  anonymous     |        Owner:  fguillaume
     Type:  defect        |       Status:  new       
 Priority:  P2            |    Milestone:  CPS 3.4.4 
Component:  CPS (global)  |      Version:  TRUNK     
 Severity:  major         |   Resolution:            
 Keywords:  security XSS  |  
--------------------------+-------------------------------------------------
Changes (by madarche):

  * summary:  Don't use GET for side effects, and check that a POST comes
              from the same server => Don't use GET for side
              effects, use POST

-- 
Ticket URL: <http://svn.nuxeo.org/trac/pub/ticket/630>
Nuxeo Repository <http://www.cps-project.org/>
Nuxeo Repository