Closed
Milestone
Nov 24, 2017–Jan 23, 2018
1.9.15
Unstarted Issues (open and unassigned)
0
Ongoing Issues (open and assigned)
0
Completed Issues (closed)
14
- Do not allow "/" or ".." in skin parameter to avoid directory traversal attack
- Captcha code not removed after successful verification
- Encoding issues with LDAP configuration backend
- Wrong return status for processLogoutRequestMsg in SAML module
- Prevent infinite loop in LDAP group recursive search
- local session storage not being cleaned up
- Encoding issues with MySQL configuration backend
- missing dependency LWP::Protocol::https on CentOS 7 packaging
- Initial url lost during reset password workflow
- Check that skin directory exists before trying to open it
- Autoredirect does not work after session expiration
- llng-fastcgi-server: Allow to listen on TCP
- mailFrom and mailReplyTo directives : bad default address
- purgeLocalCache should use conf from manager
