Item2981 < Bugs

• Do not register here on develop.twiki.org, login with your twiki.org account.
• Use

Item7848 for generic doc work for TWiki-6.1.1. Use

Item7851 for doc work on extensions that are not part of a release. More... Close
• Anything you create or change in standard webs (Main, TWiki, Sandbox etc) will be automatically reverted on every SVN update.
• Does this site look broken?. Use the LitterTray web for test cases.

Windows only

Sandbox.pm has:

                    } elsif ($flag =~ /S/) {
                        # "Harmless" string. Aggressively filter-in on unsafe
                        # platforms.
                        if ( $this->{SAFE} ||
                               $param =~ /^[0-9A-Za-z.+_\-]$/ ) {
                            push @targs, untaintUnchecked( $param );
                        } else {
                            throw Error::Simple( "invalid string argument '$param' $t" );
                        }

Oops. RE should be changed to /^[0-9A-Za-z.+_\-]+$/

From TWiki:Support.LoginUserFails

Done

4.1.0 released

KJL

ItemTemplate
Summary	Sandbox aggressively filters all but single-character strings
ReportedBy	TWiki:Main.CrawfordCurrie
Codebase	~twiki4
SVN Range	TWiki-4.1, Sun, 08 Oct 2006, build 11688
AppliesTo	Engine
Component
Priority	Urgent
CurrentState	Closed
WaitingFor
Checkins	11697
TargetRelease	minor

Raw edit | More topic actions

Topic revision: r4 - 2007-01-16 - KennethLavrsen

Account
- Log In

Edit
Attach