Uploaded image for project: 'PUBLIC - Liferay Sync'
  1. PUBLIC - Liferay Sync
  2. SYNC-1308

Files in trash should not be downloadable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 3.0.3 B4
    • Fix Version/s: 3.0.4 B5
    • Component/s: Sync Connector
    • Labels:
      None
    • Affects Portal Version/s:
      Master, 6.2.x

      Description

      Currently, files that are in the portal's trash bin are downloadable through sync-web's download servlet. This is a potential security risk.

        Attachments

          Activity

            People

            Assignee:
            michael.young Michael Young
            Reporter:
            dennis.ju Dennis Ju
            Participants of an Issue:
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              5 years, 36 weeks, 2 days ago

                Packages

                Version Package
                3.0.4 B5