Revision: 1440
http://gatewiki.svn.sourceforge.net/gatewiki/?rev=1440&view=revAuthor: hcunningham
Date: 2009-07-02 18:22:51 +0000 (Thu, 02 Jul 2009)
Log Message:
-----------
more
Modified Paths:
--------------
trunk/cow/doc/cow-backlog.html
trunk/cow/doc/cow-backlog.yam
Modified: trunk/cow/doc/cow-backlog.html
===================================================================
--- trunk/cow/doc/cow-backlog.html 2009-07-02 17:09:26 UTC (rev 1439)
+++ trunk/cow/doc/cow-backlog.html 2009-07-02 18:22:51 UTC (rev 1440)
@@ -105,9 +105,8 @@
<li>any directory that now contains a file called <tt>.cow:raw-html</tt> will now
render any non-YAM HTML files directly (see
<a class="cow-url" href="gatewiki.html#raw-html">gatewiki.html#raw-html</a>). this means you can serve e.g. javadocs.
- <b>BUT</b> it is a potentially nasty security hole... so we need to add a
- better mechanism (and the ability to turn off the <tt>.cow:raw-html</tt> if I
- didn't do that already?):</li>
+ <b>BUT</b> it is a potentially nasty security hole and is turned off by
+ default, so we need to add a better mechanism:</li>
<ul>
<li>add a list of path patterns to each wiki area, which would match either
files or directories (AR might know the GORM invocations? a new table
Modified: trunk/cow/doc/cow-backlog.yam
===================================================================
--- trunk/cow/doc/cow-backlog.yam 2009-07-02 17:09:26 UTC (rev 1439)
+++ trunk/cow/doc/cow-backlog.yam 2009-07-02 18:22:51 UTC (rev 1440)
@@ -35,9 +35,8 @@
- any directory that now contains a file called ^.cow:raw-html^ will now
render any non-YAM HTML files directly (see
%(gatewiki.html#raw-html)). this means you can serve e.g. javadocs.
- *BUT* it is a potentially nasty security hole... so we need to add a
- better mechanism (and the ability to turn off the ^.cow:raw-html^ if I
- didn't do that already?):
+ *BUT* it is a potentially nasty security hole and is turned off by
+ default, so we need to add a better mechanism:
- add a list of path patterns to each wiki area, which would match either
files or directories (AR might know the GORM invocations? a new table
RawHtmlPatterns?)
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
------------------------------------------------------------------------------
_______________________________________________
gatewiki-commits mailing list
gatewiki-commits@...
https://lists.sourceforge.net/lists/listinfo/gatewiki-commits