This project is read-only.

Syndication.axd security bug?

Topics: ASP.NET 2.0
Mar 15, 2011 at 2:26 PM


i've just created an internal blog system for a company that is hosted on a public server. The Content is restricted to registered users. But i can read all posts through the syndication handler. Is it a feature or a bug?



Mar 16, 2011 at 10:54 AM

Hi, you're right, this is a bug.  It was brought up recently in this thread as well.  Thanks for reporting it.

I just checked in a fix for this -- BE