Citytechinc/cq-groovy-console — pull request #12 by kitarek (2013-11-30 18:37:58+00:00)
Title: 3.0.2 - Security fix: anonymous script execution

Hi,

please create a new 3.0.2 branch based on 3.0.1 tag for which following commit fixes security problem:

Author: Arkadiusz Kita
Date: Sat Nov 30 18:37:06 2013 +0100

Security fix: anonymous script execution

Fixed major security problem:

* execution of any groovy script with anonymous access on publish CQ instances
* execution of any groovy script with non-administrative privileges on author CQ instances
* added "not sufficient privileges" response message for POST groovyconsole servlet

Kind regards,
Arkadiusz Kita