[RCD] zero day vulnerability (tested on v8.0 to 9.0)

Cor Bosman cor at xs4all.nl
Wed Mar 27 20:54:03 CET 2013


On Mar 27, 2013, at 8:35 PM, "A.L.E.C" <alec at alec.pl> wrote:

> On 03/27/2013 08:24 PM, Cor Bosman wrote:
> 
>> If we pull the new code, do we need to modify plugins that change prefs?
> 
> Yes, if plugin uses save-pref command, it should define $allowed_prefs
> variable in plugin class. The variable should contain a list of option
> names.

Just to be absolutely sure, this is not related to the preferences_save hook?

Cor



More information about the dev mailing list