Andrei Rebegea c1270defd1 Merged 5.2.N (5.2.2) to HEAD (5.2) ...

135255 arebegea: MNT-17427 : api/invite/cancel deletes records in the database with a GET: CSRF/XSS attack
      - delete the script/org/alfresco/repository/invite/invite.get
      - use the alternatives: script/org/alfresco/repository/site/invitation/invitation.post and script/org/alfresco/repository/site/invitation/invitation.delete
      - updating the tests
      - updating the controller for the invitation.delete to a java controller
      - fix test fallout (SiteServiceTest testInviteDisabledUser - expected error status code)
      - improve security by allowing only invitationIDs that belong the the site passed as parameter to be canceled
      - be consistent and return 404 when an invitationID can not be found


git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@137384 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261

2017-06-14 17:02:29 +00:00

..

opencmis

Merged 5.2.0 (5.2.0) to HEAD (5.2)

2017-02-07 15:07:57 +00:00

repo

Merged 5.2.N (5.2.2) to HEAD (5.2)

2017-06-14 17:02:29 +00:00

rest

Merged 5.2.N (5.2.2) to HEAD (5.2)

2017-06-14 17:00:48 +00:00

web

Merged 5.2.N (5.2.1) to HEAD (5.2)

2016-06-03 17:08:06 +00:00