Edgewall Software
Modify ↓

Ticket #275 (closed defect: fixed)

Opened 8 years ago

Last modified 5 years ago

html processor should probably be disabled by default or operate in "safe" mode.

Reported by: jonas Owned by: daniel
Priority: highest Milestone: 0.7
Component: wiki system Version: 0.6.1
Severity: normal Keywords:
Cc:
Release Notes:
API Changes:

Description

The html processor could potentially be dangerous if malicious users embedd <embed>, <object> or <script> tags.

Attachments

Change History

comment:1 Changed 8 years ago by anonymous

  • Priority changed from high to normal

comment:2 Changed 8 years ago by anonymous

  • Priority changed from normal to highest

comment:3 Changed 8 years ago by daniel

  • Milestone changed from 0.6.2 to 0.7

comment:4 Changed 8 years ago by daniel

  • Owner changed from jonas to daniel
  • Status changed from new to assigned

comment:5 Changed 8 years ago by daniel

  • Resolution set to fixed
  • Status changed from assigned to closed

Fixed in [479].

Could probably be improved.

View ↑

Add a comment

Modify Ticket

Change Properties
<Author field>
Action
as closed
The resolution will be deleted. Next status will be 'reopened'
to The owner will be changed from daniel. Next status will be 'closed'
Author


E-mail address and user name can be saved in the Preferences.

Attachments ↑
 
Note: See TracTickets for help on using tickets.