Comment 29 for bug 1489749

Revision history for this message
Christian Schwede (cschwede) wrote : Re: staticweb middleware ignores acl and breaks clients (CVE-2015-5249)

Attached patch from #6 with an additional test to ensure authentication middleware is used before staticweb.