#544: Potentially unsafe global request data is accessible in
Action::initialize() and View::initialize() and others
---------------------+------------------------------------------------------
Reporter: david | Owner: david
Type: defect | Status: new
Priority: high | Milestone: 0.11
Component: _OTHER_ | Version: 0.11.0RC5
Severity: major | Resolution:
Keywords: |
---------------------+------------------------------------------------------
Comment (by david):
(In [2108]) Controller now gives containers a copy of the global request
data holder. This means "request_lock_barf" is no longer used; you can
create containers in your code and they will have the actual request data
in them. Rejoice. Refs #544. Also cleaned up the locking code and made it
more secure. And did related bug fixes.
--
Ticket URL: <http://trac.agavi.org/ticket/544#comment:4>
Agavi <http://www.agavi.org/>
An MVC Framework for PHP5
_______________________________________________
Agavi Tickets Mailing List
[email protected]
http://lists.agavi.org/mailman/listinfo/tickets