Form submission doesn't check source

2007-04-16T04:20:21
ID ATLASSIAN:CONFSERVER-8270
Type atlassian
Reporter mjensen
Modified 2018-10-11T09:10:25

Description

Confluence accepts form submissions from any source. This means if you are logged in to confluence and another site submits data to the confluence instance, then its accepted without question (because the user is already logged in - or automatically logged in).

We need a way to validate the form submission.