urosm
/
ikiwiki
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
ikiwiki/IkiWiki/Plugin
History
Josh Triplett 9f75d3b1f3 teximg: Make TeX handle preventing unsafe things; remove insufficient blacklist 
TeX has configuration options that prevent unsafe things like shell
escapes and insecure file reads/writes.  Turn all of them on.

teximg's regex-based blacklist does not suffice.  For instance:

[[!teximg code="""
\catcode`\%=0
%input{/etc/passwd}
"""]]

Remove the blacklist, since the TeX configuration options seal off the
underlying mechanisms more safely, and the blacklist blocks other TeX
commands that can prove useful.
 		2009-08-28 23:18:07 -07:00
..
404.pm avoid uninitialized value warnings 2009-03-09 13:52:51 -04:00
aggregate.pm aggregate: Avoid resetting ctime when an item md5 changes. 2009-06-12 19:31:23 -04:00
amazon_s3.pm reverted a few of the string changes 2009-07-23 11:48:02 +02:00
anonok.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
attachment.pm remove deprecated admin prefs 2008-12-24 16:16:03 -05:00
autoindex.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
blogspam.pm Merge branch 'master' into po 2009-05-19 13:07:47 -04:00
brokenlinks.pm optimise brokenlinks by gathering the data when calculating backlinks 2009-08-14 01:11:53 -04:00
bzr.pm bzr: Add missing rcs_diff. (liw) 2009-02-26 14:09:26 -05:00
calendar.pm Revert "Allow add_depends to take an arrayref" 2009-08-25 17:11:29 -04:00
camelcase.pm Avoid %links accumulating duplicates. (For TOVA) 2009-05-06 00:27:24 -04:00
color.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
comments.pm comment: Make comment directives no longer use the internal "_comment" form, and document the comment directive syntax. 2009-06-02 17:06:46 -04:00
conditional.pm Consistently allow use of relative paths in all PageSpecs that take a page name parameter. Previously, match_created_before(), match_created_after(), match_sourcepage(), and match_destpage() did not support that, and the docs were not clear. 2009-01-10 14:36:03 -05:00
creole.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
cutpaste.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
darcs.pm more idiomatic use of foreach 2009-08-12 12:49:40 -04:00
ddate.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
editdiff.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
editpage.pm Add discussionpage configuration setting 2009-08-13 21:41:33 -04:00
edittemplate.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
embed.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
external.pm remove pagespec_match_list override for external 2009-05-06 13:13:01 -04:00
favicon.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
filecheck.pm pagespec error/failure distinction and error display by inline 2009-04-23 14:07:28 -04:00
format.pm allow format to use any language supported by highlight 2009-05-23 05:17:26 -04:00
fortune.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
getsource.pm verify page name is sane 2009-08-08 12:27:48 -04:00
git.pm fix rcs_getctime to return first, not last, change time 2009-03-20 16:32:37 -04:00
goodstuff.pm repolist: New plugin to support the rel=vcs-* microformat. 2009-01-07 16:07:46 -05:00
google.pm avoid mixing english with translation 2009-01-26 13:08:25 -05:00
goto.pm goto: Support being passed a page title that is not a valid page name, to support several cases including mercurial's long user names on the RecentChanges page, and urls with spaces being handled by the 404 plugin. 2009-06-06 02:36:40 -04:00
graphviz.pm doubled semicolons 2009-02-11 12:30:28 -05:00
haiku.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
highlight.pm highlight: Fix utf-8 encoding bug. Closes: #535028 2009-07-07 16:31:18 -04:00
hnb.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
html.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
htmlbalance.pm htmlbalance: Demand-load HTML::TreeBuilder to avoid failing test suite if it is not present. 2008-12-29 15:08:18 -05:00
htmlscrubber.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
htmltidy.pm htmltidy: Return an error message if tidy fails. Closes: #543722 2009-08-27 16:27:57 -04:00
httpauth.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
img.pm img: Don't generate new verison of image if it is scaled to be larger in either dimension. 2009-08-28 23:31:53 -04:00
inline.pm Merge commit 'intrigeri/po' 2009-08-28 19:48:32 -04:00
link.pm Avoid %links accumulating duplicates. (For TOVA) 2009-05-06 00:27:24 -04:00
linkmap.pm avoid using pagespec_match_list here 2009-04-23 16:26:54 -04:00
listdirectives.pm listdirectives: Avoid listing _comment directives and generally assume any directive starting with _ is likewise internal. 2009-05-22 14:17:26 -04:00
lockedit.pm remove deprecated admin prefs 2008-12-24 16:16:03 -05:00
map.pm Revert "Allow add_depends to take an arrayref" 2009-08-25 17:11:29 -04:00
mdwn.pm add a long name for mdwn ("Markdown") 2009-05-16 13:59:27 +01:00
mercurial.pm fix rcs_getctime to return first, not last, change time 2009-03-20 16:24:19 -04:00
meta.pm meta: depend on absolute page name, not relative 2009-08-15 13:50:55 -04:00
mirrorlist.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
monotone.pm use a more idiomatic foreach my 2009-08-12 12:43:57 -04:00
more.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
norcs.pm Coding style change: Remove explcit vim folding markers. 2008-12-17 15:22:16 -05:00
opendiscussion.pm Add discussionpage configuration setting 2009-08-13 21:41:33 -04:00
openid.pm Move OpenID pretty-printing from openid plugin to core 2009-07-10 18:41:16 +01:00
orphans.pm orphans: Reuse backlinks info 2009-08-14 00:51:52 -04:00
otl.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
pagecount.pm pagecount: Fix broken optimisation for * pagespec. 2009-06-05 18:04:39 -04:00
pagestats.pm pagestats: add `among` parameter, which only counts links from specified pages 2009-07-17 11:12:55 +01:00
pagetemplate.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
parentlinks.pm Merge commit 'upstream/master' into prv/po 2009-01-01 13:34:00 +01:00
passwordauth.pm Disable the Preferences link if no plugin with an auth hook is enabled. 2009-06-09 15:39:00 -04:00
pingee.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
pinger.pm pinger: Get whole url, don't just head. 2009-01-11 14:27:27 -05:00
po.pm Merge commit 'intrigeri/po' 2009-08-28 19:48:32 -04:00
poll.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
polygen.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
postsparkline.pm simplify 2009-04-23 16:23:52 -04:00
prettydate.pm typo 2009-07-01 13:45:28 -04:00
progress.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
rawhtml.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
recentchanges.pm recentchanges: change to using do=goto links. 2009-04-01 19:18:43 -04:00
recentchangesdiff.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
relativedate.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
remove.pm only pass named parameters to the canremove hook 2009-01-26 23:07:19 +01:00
rename.pm remove prototype from renamehook 2009-07-20 07:11:22 +02:00
repolist.pm repolist: New plugin to support the rel=vcs-* microformat. 2009-01-07 16:07:46 -05:00
search.pm po: gettext-ize error messages 2009-01-02 15:00:34 +01:00
shortcut.pm check for empty srcdir 2009-02-14 03:04:11 -05:00
sidebar.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
signinedit.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
skeleton.pm.example rename hook: instead of modifying the passed-by-name array, return a copy 2009-01-27 17:08:55 +01:00
smiley.pm avoid potential infinite loop in smiley expansion 2009-03-08 18:49:34 -04:00
sparkline.pm s//bad//invalid// # jonas= 2009-07-19 20:13:57 +02:00
svn.pm svn: Fix rcs_rename to properly scope call to dirname. 2009-07-08 13:13:23 -04:00
table.pm table: Find links in external files in scan pass. 2009-01-06 15:36:32 -05:00
tag.pm Avoid %links accumulating duplicates. (For TOVA) 2009-05-06 00:27:24 -04:00
template.pm When loading a template in scan mode, let preprocess know it only needs to scan. 2009-03-08 18:57:47 -04:00
testpagespec.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
teximg.pm teximg: Make TeX handle preventing unsafe things; remove insufficient blacklist 2009-08-28 23:18:07 -07:00
textile.pm add a long name for textile/txtl ("Textile") 2009-05-16 13:59:36 +01:00
tla.pm Coding style change: Remove explcit vim folding markers. 2008-12-17 15:22:16 -05:00
toc.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
toggle.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
txt.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
typography.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
underlay.pm Add underlay plugin 2009-01-18 16:42:12 +00:00
version.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
websetup.pm websetup: If setup fails, restore old setup file. 2009-04-22 14:05:37 -04:00
wikitext.pm finalise version 3.00 of the plugin api 2008-12-23 16:34:19 -05:00
wmd.pm configure wmd to leave text in markdown 2009-03-08 13:11:26 -04:00