You are here: Foswiki>Tasks Web>Item13601 (10 Oct 2015, GeorgeClark)Edit Attach

Item13601: Page cache pollution by illegal path components.

pencil
Priority: Urgent
Current State: Closed
Released In: 2.0.2
Target Release: patch
Applies To: Engine
Component:
Branches: master
Reported By: MichaelDaum
Waiting For:
Last Change By: GeorgeClark
This happens frequently on Foswiki.org, ioe on Community.WebHome and now System.WebHome:

A link such as

<a href="%SCRIPTURLPATH{"view"}%/Main/WebHome&#;gt">Pollute my cache</a>

... will store the "Missing or illegal web name" warning screen into the page cache then accessible visiting the real topic.

This is probably not related to the page cache but to Foswiki::_parsePath() being called with a bad path and then returning a default value.

Solution for Foswiki::PageCache::isCacheable is to return false in case there is an invalidWeb or invalidTopic being found as part of the current $session.

-- MichaelDaum - 03 Aug 2015

I've patched Foswiki.org as this is most annoying.

-- MichaelDaum - 03 Aug 2015
 

ItemTemplate edit

Summary Page cache pollution by illegal path components.
ReportedBy MichaelDaum
Codebase 2.0.0
SVN Range
AppliesTo Engine
Component
Priority Urgent
CurrentState Closed
WaitingFor
Checkins distro:774bdbec99f1
TargetRelease patch
ReleasedIn 2.0.2
CheckinsOnBranches master
trunkCheckins
masterCheckins distro:774bdbec99f1
ItemBranchCheckins
Release01x01Checkins
Topic revision: r3 - 10 Oct 2015, GeorgeClark
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy