Skip to content

Commit

Permalink
Item14301: Strikeone needs the cookie prefix.
Browse files Browse the repository at this point in the history
This is incomplete!   The code does not support the cookie path.
  • Loading branch information
gac410 committed Jan 31, 2017
1 parent f12adb9 commit a93ee2f
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion core/pub/System/JavascriptFiles/strikeone.uncompressed.js
Expand Up @@ -217,7 +217,8 @@ var StrikeOne = {
calculateNewKey: function(input) {
if (input && input.charAt(0) == '?') {
// Read the cookie to get the secret
var secret = StrikeOne.readCookie('FOSWIKISTRIKEONE');
var cookieName = foswiki.getPreference('COOKIENAMEPREFIX') + 'FOSWIKISTRIKEONE';
var secret = StrikeOne.readCookie(cookieName);
// combine the validation key with the secret in a way
// that can't easily be reverse-engineered, but can be
// duplicated on the server (which also knows the secret)
Expand Down

0 comments on commit a93ee2f

Please sign in to comment.