[gatewiki-commits] SF.net SVN: gatewiki:[1440] trunk/cow/doc

[hcunningham-2]

Revision: 1440
          http://gatewiki.svn.sourceforge.net/gatewiki/?rev=1440&view=rev
Author:   hcunningham
Date:     2009-07-02 18:22:51 +0000 (Thu, 02 Jul 2009)

Log Message:
-----------
more

Modified Paths:
--------------
    trunk/cow/doc/cow-backlog.html
    trunk/cow/doc/cow-backlog.yam

Modified: trunk/cow/doc/cow-backlog.html
===================================================================
--- trunk/cow/doc/cow-backlog.html 2009-07-02 17:09:26 UTC (rev 1439)
+++ trunk/cow/doc/cow-backlog.html 2009-07-02 18:22:51 UTC (rev 1440)
@@ -105,9 +105,8 @@
   <li>any directory that now contains a file called <tt>.cow:raw-html</tt> will now
     render any non-YAM HTML files directly (see
     <a class="cow-url" href="gatewiki.html#raw-html">gatewiki.html#raw-html</a>). this means you can serve e.g. javadocs.
-    <b>BUT</b> it is a potentially nasty security hole... so we need to add a
-    better mechanism (and the ability to turn off the <tt>.cow:raw-html</tt> if I
-    didn't do that already?):</li>
+    <b>BUT</b> it is a potentially nasty security hole and is turned off by
+    default, so we need to add a better mechanism:</li>
     <ul>
     <li>add a list of path patterns to each wiki area, which would match either
       files or directories (AR might know the GORM invocations? a new table

Modified: trunk/cow/doc/cow-backlog.yam
===================================================================
--- trunk/cow/doc/cow-backlog.yam 2009-07-02 17:09:26 UTC (rev 1439)
+++ trunk/cow/doc/cow-backlog.yam 2009-07-02 18:22:51 UTC (rev 1440)
@@ -35,9 +35,8 @@
   - any directory that now contains a file called ^.cow:raw-html^ will now
     render any non-YAM HTML files directly (see
     %(gatewiki.html#raw-html)). this means you can serve e.g. javadocs.
-    *BUT* it is a potentially nasty security hole... so we need to add a
-    better mechanism (and the ability to turn off the ^.cow:raw-html^ if I
-    didn't do that already?):
+    *BUT* it is a potentially nasty security hole and is turned off by
+    default, so we need to add a better mechanism:
     - add a list of path patterns to each wiki area, which would match either
       files or directories (AR might know the GORM invocations? a new table
       RawHtmlPatterns?)


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

------------------------------------------------------------------------------
_______________________________________________
gatewiki-commits mailing list
gatewiki-commits@...
https://lists.sourceforge.net/lists/listinfo/gatewiki-commits