Zope PAS

  1. Bug #1079204
  2. Comment #1

Comment 1 for bug 1079204

Revision history for this message
Tres Seaver (tseaver) wrote :

I have checked in CSRF protection for the ZODBUserManager,
ZODBRoleManager, ZODBGroupManager, and DynamicGroupsPlugin
plugins:

 http://svn.zope.org/Products.PluggableAuthService/trunk/?rev=128301&view=rev

 http://svn.zope.org/Products.PluggableAuthService/trunk/?rev=128302&view=rev

 http://svn.zope.org/Products.PluggableAuthService/trunk/?rev=128303&view=rev

 http://svn.zope.org/Products.PluggableAuthService/trunk/?rev=128304&view=rev

 http://svn.zope.org/Products.PluggableAuthService/trunk/?rev=128305&view=rev

I have verified that your exploit is now blocked.