Item6704 < Bugs

• Do not register here on develop.twiki.org, login with your twiki.org account.
• Use

Item7848 for generic doc work for TWiki-6.1.1. Use

Item7851 for doc work on extensions that are not part of a release. More... Close
• Anything you create or change in standard webs (Main, TWiki, Sandbox etc) will be automatically reverted on every SVN update.
• Does this site look broken?. Use the LitterTray web for test cases.

AppliesTo:	Component:	Priority:	CurrentState:	WaitingFor:	TargetRelease	ReleasedIn
Extension	ReputationPlugin	Enhancement	Closed		n/a

Bug report for SVN.

Added secure commenting system, which uses modified commentplugin to sign the comments targeted to special comment web (currently hardcoded to be "Comment")

The comments are signed with 224 bit sha hmac (random shared secret used as a key) and assigned an ID. Comments are visible if the author has a good reputation (in relation to the viewing user) or have received up votes from reputable users. Comments are not displayed if the content is modified in the target topic (hmac does not match), the comment is voted down or the comment author has a bad reputation. Comments which are from unknown users or have not been voted by reputable users are displayed in collapsed form.

-- TWiki:Main/JoonaKannisto - 2011-04-28

Included a patch needed for CommentPlugin to sign the comments.

-- TWiki:Main.JoonaKannisto - 2011-04-28

ItemTemplate
Summary	Secure commenting for ReputationPlugin
ReportedBy	TWiki:Main.JoonaKannisto
Codebase	5.0.1
SVN Range	TWiki-5.1.0-trunk, Tue, 19 Apr 2011, build 21041
AppliesTo	Extension
Component	ReputationPlugin
Priority	Enhancement
CurrentState	Closed
WaitingFor
Checkins	TWikirev:21112
TargetRelease	n/a
ReleasedIn

Attachments

Topic attachments
I	Attachment	History	Action	Size	Date	Who	Comment
png	commentinterface.png	r1	manage	37.7 K	2011-04-28 - 12:05	JoonaKannisto	Example of the comment interface in action

Item6704: Secure commenting for ReputationPlugin

Item Form Data

Edit Form Data

Detail