Campaign: Bugs

.jsrpc does not require authentication

Even for a private Wiki one can get, say, users' list with a series of

`/.jsrpc/usersearch?q=' requests.

Submitted by Unsubscribed User

Tags

Voting

0 votes
Idea No. 66