You are here: Foswiki>Tasks Web>Item13601 (10 Oct 2015, GeorgeClark)Edit Attach

Item13601: Page cache pollution by illegal path components.

Priority: Urgent
Current State: Closed
Released In: 2.0.2
Target Release: patch
Applies To: Engine
Branches: master
Reported By: MichaelDaum
Waiting For:
Last Change By: GeorgeClark
This happens frequently on, ioe on Community.WebHome and now System.WebHome:

A link such as

<a href="%SCRIPTURLPATH{"view"}%/Main/WebHome&#;gt">Pollute my cache</a>

... will store the "Missing or illegal web name" warning screen into the page cache then accessible visiting the real topic.

This is probably not related to the page cache but to Foswiki::_parsePath() being called with a bad path and then returning a default value.

Solution for Foswiki::PageCache::isCacheable is to return false in case there is an invalidWeb or invalidTopic being found as part of the current $session.

-- MichaelDaum - 03 Aug 2015

I've patched as this is most annoying.

-- MichaelDaum - 03 Aug 2015

ItemTemplate edit

Summary Page cache pollution by illegal path components.
ReportedBy MichaelDaum
Codebase 2.0.0
SVN Range
AppliesTo Engine
Priority Urgent
CurrentState Closed
Checkins distro:774bdbec99f1
TargetRelease patch
ReleasedIn 2.0.2
CheckinsOnBranches master
masterCheckins distro:774bdbec99f1
Topic revision: r3 - 10 Oct 2015, GeorgeClark
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy