-
Type:
Bug
-
Resolution: Duplicate
-
Priority:
Medium
-
None
-
Affects Version/s: 3.3
-
Component/s: None
-
Environment:
ubuntu
When I do wget --user=<user> --password=<pwd> -m <confluence url>
I delete all attachments!!!!!!!!!!!!!!!!!!
The systems seems to use the wrong logic when javascript is disabled (in which case it assumes yes for deletion)
- duplicates
-
CONFSERVER-8254 Review GET methods in Confluence to ensure web spiders cannot execute dangerous actions (like removeattachment)
-
- Gathering Impact
-