diff options
| author | luccioman <luccioman@users.noreply.github.com> | 2017-09-29 19:18:12 +0200 |
|---|---|---|
| committer | luccioman <luccioman@users.noreply.github.com> | 2017-09-29 19:18:12 +0200 |
| commit | 27ab733685930a8c967c3f28197fc34f98123010 (patch) | |
| tree | 8040bd8ef1b774820f8932ef31fdc030ed126cbd /htroot/env | |
| parent | ba60f65040a744b4ed28879dae0e0286405be3d7 (diff) | |
Ensure private search features are not lost on Digest auth timeout
This is a fix for mantis 766 ( http://mantis.tokeek.de/view.php?id=766 )
Since the upgrade to Digest authentication, access to protected search
features was indeed disabled once the Digest nonce timed out.
After Digest auth timeout the browser no more sent authentication
information and as the search results page is not private, protected
features were simply be hidden without asking browser again for
authentication.
Adding a supplementary parameter when accessing the search results as
authenticated fixes this.
Diffstat (limited to 'htroot/env')
| -rw-r--r-- | htroot/env/templates/header.template | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/htroot/env/templates/header.template b/htroot/env/templates/header.template index 32e70cc59..639e7ec2a 100644 --- a/htroot/env/templates/header.template +++ b/htroot/env/templates/header.template @@ -20,6 +20,9 @@ <input type="hidden" name="urlmaskfilter" value=".*" /> <input type="hidden" name="prefermaskfilter" value="" /> <input type="hidden" name="nav" value="all" /> + #(authorized)#:: + <input type="hidden" name="auth" id="auth" value=""/> + #(/authorized)# </form> </div> <script type="text/javascript"> |