forwarded 582093 http://moinmo.in/MoinMoinBugs/TitleSearchFailsWsgiSSL
thanks

Thank you for investigating this issue.
I'll try to have a look tonight (unless another maintainer
is faster than me;)

(I am considering to fix this issue in the next Debian Lenny
point release, rather that a security update.)

Ruprechtsberger Rainer wrote:
> python-moinmoin search fails to detect https correctly when running
> under mod_wsgi. This problem is known upstream:
> http://moinmo.in/MoinMoinBugs/TitleSearchFailsWsgiSSL
>
> There is a security implication of this bug: in a https only environment
> information about a wiki instance is sent unencrypted over network.
>
> A fix is available for quite a while:
> http://hg.moinmo.in/moin/1.7/rev/3e019f6ae381





-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to