urosm
/
ikiwiki
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

note that the patch on this page is complely broken, and allows any file starting with a dot to be included 

If you applied that patch to your site, you should remove it right away!
master
Joey Hess 2010-03-14 15:08:41 -04:00
parent 823ec815d4
commit a5ee401044
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
doc/todo/enable-htaccess-files.mdwn
View File

@ -12,6 +12,13 @@
qr/(^|\/).svn\//, qr/.arch-ids\//, qr/{arch}\//],
wiki_link_regexp => qr/\[\[(?:([^\]\|]+)\|)?([^\s\]#]+)(?:#([^\s\]]+))?\]\]/,
> Note that the above patch is **completely broken**.
> It removes the crucial excludes of all files starting with a dot.
> The negative regexps for htaccess have no effect, so the whole
> thing only "works" because it allows *any* file starting with a dot.
> If you applied this patch to your ikiwiki, you opened a huge security
> hole. --[[Joey]]
[[!tag patch patch/core]]
This lets the site administrator have a `.htaccess` file in their underlay