Wed, 21 Jan 2015 15:58:33 +0100 [security] Test case and fix for an INSERT security hole stable
Julien Cristau <julien.cristau@logilab.fr> [Wed, 21 Jan 2015 15:58:33 +0100] rev 10153
[security] Test case and fix for an INSERT security hole 7099bbd685aa introduced a untested corner case in which an Entity with no attribute specified could be created whatever the permissions. Report and test case by Christophe de Vienne, fix by Aurelien Campeas. Thanks! Closes #4854359
(0) -10000 -3000 -1000 -300 -100 -30 -10 -1 +1 +10 +30 +100 +300 +1000 tip