Public bug reported:
CSRf checking in admin.py is buggy. Logging into the admin interface
succeeds fine, but when clicking any of the links on the page top, the
request forgery error message is displayed on the resulting page.
The problem is basically that Cgi/admin.py is called with only a single
param in cgidata, namely 'admin' (which is empty). Since this param is
not part of the safe_params list, csrf_check() is called with 'None' as
second parameter.
Since submitting forms is working fine, this bug is merely a cosmetic
one but still very confusing.
** Affects: mailman
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1160647
Title:
request forgery check displayed when only viewing admin pages
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1160647/+subscriptions
_______________________________________________
Mailman-coders mailing list
[email protected]
http://mail.python.org/mailman/listinfo/mailman-coders
