aboutsummaryrefslogtreecommitdiff
path: root/po
diff options
context:
space:
mode:
authorSimon McVittie <smcv@debian.org>2019-02-10 16:56:41 +0000
committerSimon McVittie <smcv@debian.org>2019-02-26 22:21:31 +0000
commit9a275b2f1846d7268c71a740975447e269383849 (patch)
tree0c832065045c67438ede85f237b93f77b74ecd2b /po
parentd283e4ca1aeb6ca8cc0951c8495f778071076013 (diff)
downloadikiwiki-9a275b2f1846d7268c71a740975447e269383849.tar
ikiwiki-9a275b2f1846d7268c71a740975447e269383849.tar.gz
doc: Document security issues involving LWP::UserAgent
Recommend the LWPx::ParanoidAgent module where appropriate. It is particularly important for openid, since unauthenticated users can control which URLs that plugin will contact. Conversely, it is non-critical for blogspam, since the URL to be contacted is under the wiki administrator's control. Signed-off-by: Simon McVittie <smcv@debian.org>
Diffstat (limited to 'po')
0 files changed, 0 insertions, 0 deletions