13 Feb
2012
13 Feb
'12
11:17 p.m.
Hi, Sergiu!
--
Ricardo Rodríguez
Research Management and Promotion Technician
Health Research Institute of Santiago de Compostela (IDIS)
http://www.idisantiago.es
________________________________________
From: users-bounces(a)xwiki.org [users-bounces(a)xwiki.org] On Behalf Of Sergiu Dumitriu
[sergiu(a)xwiki.com]
Sent: 13 February 2012 18:59
To: XWiki Users
Subject: Re: [xwiki-users] security breach?
On 02/13/2012 11:47 AM, Ricardo.Julio.Rodriguez.Fernandez(a)sergas.es wrote:
Hi!
Under certain circunstances I'm not able to identify, even though a given I've no
access to a given XWiki page, it is possible to access/download their attached files
provided you know their URLs.
Please, could you figure out why this could happen? Thanks!
>
> This should not happen from XWiki. Do you have any other proxies,
> frontends, or even a simple browser cache that is serving the file
> without asking XWiki for it?
The only explanation is a cache... but how a robot is able to index a PDF this way?
I'm not able to reproduce it though...
Please, could access the file listed as freely accessible in my previous message in this
thread?
Thanks!!!
This is causing me some serious problems here. Running
XWiki Enterprise 2.4.30451.
Greetings!
Ricardo
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
Nota: A información contida nesta mensaxe e os seus posibles documentos adxuntos é privada
e confidencial e está dirixida únicamente ó seu destinatario/a. Se vostede non é o/a
destinatario/a orixinal desta mensaxe, por favor elimínea. A distribución ou copia desta
mensaxe non está autorizada.
Nota: La información contenida en este mensaje y sus posibles documentos adjuntos es
privada y confidencial y está dirigida únicamente a su destinatario/a. Si usted no es
el/la destinatario/a original de este mensaje, por favor elimínelo. La distribución o
copia de este mensaje no está autorizada.
See more languages: http://www.sergas.es/aviso_confidencialidad.htm