[ZCM] [ZC] 2303/ 2 Resolve "Take Ownership button fails"

Issue #2303 Update (Resolve) "Take Ownership button fails"
 Status Resolved, Zope/bug medium
To followup, visit:
  http://www.zope.org/Collectors/Zope/2303

==============================================================
= Resolve - Entry #2 by mj on Mar 30, 2007 9:15 am

 Status: Pending => Resolved

Thanks for catching that! I have no idea how I missed that form, I did search for them. I probably focused on method="get" and that form completely omits the method attribute.

Fixed on all the relevant branches and the trunk:

http://svn.zope.org/Zope/trunk?rev=73946&view=rev
http://svn.zope.org/Zope/branches/2.10?rev=73947&view=rev
http://svn.zope.org/Zope/branches/2.9?rev=73948&view=rev
http://svn.zope.org/Zope/branches/Zope-2_8-branch?rev=73949&view=rev
________________________________________
= Request - Entry #1 by mickiedesman on Mar 30, 2007 5:18 am

Take Ownership button fails after applying the CVE-2007-0240 vulnerability patch published here:

http://www.zope.org/Products/Zope/Hotfix-2007-03-20/announcement

looks like all ZMI templates that deal with security need to be reviewed for forms with GET method.
==============================================================