CST-7049 doAsUserId leaked to third party sites

Description

The "doAsUserId" parameter used by Administrators for impersonating another user can be leaked to third party sites.

Severity

Severity 2

Fixed Version(s)

Publication date: Tue, 29 May 2018 04:00:00 +0000