Properly authorize copy_list action

sympa-community · Nov 5, 2024 · 1ed0dbe · 1ed0dbe
1 parent 71bdf64
commit 1ed0dbe
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/cgi/wwsympa.fcgi.in b/src/cgi/wwsympa.fcgi.in
@@ -1496,12 +1496,13 @@ while ($query = Sympa::WWW::FastCGI->new) {
             my $old_subaction = $in{'subaction'};
 
             ## Check required action parameters
-            my $check_output = check_action_parameters($action);
+            my $check_action = $action eq 'move_list' && $in{'mode'} eq 'copy' ? 'copy_list' : $action;
+            my $check_output = check_action_parameters($check_action);
 
             unless (defined $check_output) {
                 delete $param->{'list'};
                 wwslog('err', 'Missing required parameters for action "%s"',
-                    $action);
+                    $check_action);
                 delete $param->{'action'};
                 last;
             } elsif ($check_output != 1) {