On 7/24/06, Frank W. Zammetti <[EMAIL PROTECTED]> wrote:
Potentially simple solution: a config switch to turn this functionality on (the ability to specify method in the URL). It'd be off by default. That way everyone can be happy... security "hole" closed, but easy to activate for those who want it.
Yes, we have a webwork switch that controls the alias behavior, and potentially others. * http://www.twdata.org/backups/WW/release-notes-200.html#ReleaseNotes2.0.0-Newpropertysettings I don't think we need to finely grade the switch. -Ted. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
