The pb is the query part of the URI of HTTP GET requests isn't taken when checking for attempt to perform a CRUD operation on a resource in Silverpeas. Now all parts of the query is checked. Ensure also to avoid regexp flooding.
Guest users cannot access profiles of others users.
Fix minor bugs in directory. Fix null user id in the Ckeditor plugin identitycard.
Remove the login and specific identifier from the user data sent by the User Profile web service.
Refactor the way the search on users and groups are performed in Administration. Uses for doing a visitor pattern so that any additional treatments on the search criteria can be done easier.
