Re: Excluding twikidraw and anywikidraw

Kai Jaeger <[email protected]>
Newsgroups gmane.comp.web.wiki.moin.general
Message-ID <CAH2kyOGde6DgRE_gPPV-COv4BEpn02XbR1n9ma-9Z-3XrxG_oA@mail.gmail.com>
??

I haven't changed anything since I wrote the mail, and it still works for me.

I am gastly flubbered ;)

On Sat, Dec 29, 2012 at 3:09 PM, Thomas Waldmann <[email protected]> wrote:
> On Sat, 2012-12-29 at 08:56 +0000, Kai Jaeger wrote:
>> I've done exactly what was suggested to fix the security issue:
>>
>>   actions_excluded = ['newaccount', 'RenderAsDocbook', 'SyncPages',
>> 'xmlrpc', 'PackagePages', 'Raw Text', 'twikidraw', 'anywikidraw', ]
>>
>> but the page is rendered without an error message, see the bottom of this page
>>
>> http://sandbox.aplwiki.com/TestPage1
>
> I get "unknown action twikidraw" now, so it looks like you found why it
> did not work.
>
> You may want to read SecurityFixes again, there were more changes
> recently.
>

------------------------------------------------------------------------------
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. SALE $99.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122912
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.