phpwiki-talk

Re: [Phpwiki-talk] [phpwiki-checkins] CVS: phpwiki/themes/wikilens/pgsrc - New directory

[Reini U. <ru...@x-...>]

Marc-Etienne Vargenau schrieb:
> Update of /cvsroot/phpwiki/phpwiki/themes/wikilens/pgsrc
> In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv31755/wikilens/pgsrc
> 
> Log Message:
> Directory /cvsroot/phpwiki/phpwiki/themes/wikilens/pgsrc added to the repository

I have removed all of these empty and optional theme pgsrc dirs.
If there's some code failing, fix the function instead.

wikilens and MonoBook are actually themes where such pages could be 
actually added.

MonoBook needs a Template/Talk
wikilens needs a LeftbarContent
-- 
Reini Urban
http://phpwiki.org/  http://murbreak.at/

Re: [Phpwiki-talk] [phpwiki-checkins] CVS: phpwiki/themes/wikilens/pgsrc - New directory

[Marc-Etienne V. <Mar...@al...>]

Reini Urban a écrit :
> Marc-Etienne Vargenau schrieb:
>> Update of /cvsroot/phpwiki/phpwiki/themes/wikilens/pgsrc
>> In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv31755/wikilens/pgsrc
>>
>> Log Message:
>> Directory /cvsroot/phpwiki/phpwiki/themes/wikilens/pgsrc added to the repository
> 
> I have removed all of these empty and optional theme pgsrc dirs.
> If there's some code failing, fix the function instead.

Hello Reini,

No problem. I had added them because I got a warning.

Regards,

Marc-Etienne

-- 
==================================================================    ------
| Marc-Etienne Vargenau                                          |   /      \
| Alcatel-Lucent France, Route de Villejust, 91620 NOZAY, FRANCE |  /  /|'`  \
| +33 (0)1 30 77 28 33, Mar...@al...  | |  /'| '   |
==================================================================  \   |/   /
| L'essence des Mathématiques est dans leur liberté.             |   \      /
|                                Georges Cantor                  |    ------
==================================================================

[Phpwiki-talk] Safe URLs in wiki

[Marc-Etienne V. <Mar...@al...>]

Hello,

In stdlib, there is a function that tests if a URL is "safe"

function IsSafeURL($url) {
     return !preg_match('/([<>"])|(%3C)|(%3E)|(%22)/', $url);
}

In practice, our users need to include in the wiki URLs generated by Live Meeting

https://www.livemeeting.com/cc/alcatel_lucent/join?id=4QPTFJ&role=present&pw=S%3Cpk%2F2fbS

and these URLs can contain %3C

What would be the risk to allow such URLs?

Best regards,

Marc-Etienne

-- 
==================================================================    ------
| Marc-Etienne Vargenau                                          |   /      \
| Alcatel-Lucent France, Route de Villejust, 91620 NOZAY, FRANCE |  /  /|'`  \
| +33 (0)1 30 77 28 33, Mar...@al...  | |  /'| '   |
==================================================================  \   |/   /
| L'essence des Mathématiques est dans leur liberté.             |   \      /
|                                Georges Cantor                  |    ------
==================================================================