Edgewall Software
Modify ↓

Opened 18 years ago

Closed 18 years ago

#7031 closed defect (worksforme)

String 'rss' at beginning of image name triggers auth challenge

Reported by: cliff@… Owned by: Jonas Borgström
Priority: normal Milestone:
Component: general Version: 0.10.3
Severity: normal Keywords:
Cc: Branch:
Release Notes:
API Changes:
Internal Changes:

Description

To reproduce:

  • Make sure anonymous has these privileges:
    • WIKI_VIEW
    • FILE_VIEW
    • BROWSER_VIEW
    • TICKET_VIEW
  • Attach an image to the page with a name that begins with 'rss'. My image was 'rss_headlines.png', for instance.
  • Insert an image tag in the page pointing to this attached file.
  • Visit the page in another browser as the anonymous user.
  • You will see the browser's authentication popup asking you to log in.

To workaround:

  • Rename the file to something else (I went to 'headlines.png')

Attachments (1)

rss_headlines.jpg​ (98.9 KB ) - added by Noah Kantrowitz 18 years ago.

Download all attachments as: .zip

Change History (4)

comment:1 by anonymous, 18 years ago

Summary: String 'rss' at beginning of image triggers auth challenge → String 'rss' at beginning of image name triggers auth challenge

by Noah Kantrowitz, 18 years ago

Attachment: rss_headlines.jpg​ added

comment:2 by Noah Kantrowitz, 18 years ago

comment:3 by Noah Kantrowitz, 18 years ago

Resolution: → worksforme
Status: new → closed

See above.

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain Jonas Borgström.
The resolution will be deleted. Next status will be 'reopened'.
to The owner will be changed from Jonas Borgström to the specified user.

Add Comment
E-mail address and name can be saved in the Preferences .
Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.