Foswiki on GitHub is open for business! Next release meeting: Monday Nov. 17, 1300Z

Item2495: OopsException documents false example using macros in parameters

Priority: CurrentState: AppliesTo: Component: WaitingFor:
Normal Closed Engine    
In Foswiki::OopsException it is stated that we entity-encode parameters so protect against XSS.

But we also document an example where we pass on MAKETEXT. This is confusing for plugin authors.

Fixing the example and making the limitation clear.

-- KennethLavrsen - 11 Dec 2009

ItemTemplate edit

Summary OopsException documents false example using macros in parameters
ReportedBy KennethLavrsen
Codebase 1.0.8, trunk
SVN Range
AppliesTo Engine
Component
Priority Normal
CurrentState Closed
WaitingFor
Checkins distro:9ee38ee322a6 distro:942e1e29b55b
TargetRelease patch
ReleasedIn 1.0.9
Topic revision: r4 - 17 Jan 2010, PaulHarvey
 
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. see CopyrightStatement. Creative Commons License