id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
102	"Security regression tests for bypass by adding "".html' to the URL"	Gavin		"Add regression functional tests as per ticket #98 and r888.

These include testing GET url's which the logged in user should not have access to, by appending to the url ('index.', 'index.html', 'index.xml', 'index..', 'index.gsp', 'index/index' etc)."	enhancement	new	major	0.9 - General Improvements	gnuMims - application security	trunk