Known Issues of TWiki Production Release 01 May 2000

Security Alerts

• Security Alert: TWiki search function allows arbitrary shell command execution
  • Fix available in SecurityAlertExecuteCommandsWithSearch
• MajorSecurityProblemWithIncludeFileProcessing:
  • It is possible to show the content of system files (i.e. password files) with the %INCLUDE{"...."}% variable or the template files. The fix prevents this.

• Note: See other TWikiSecurityAlerts

Major Issues

• MissingScriptSuffix:
  • In case you renamed your Perl scripts (i.e. view.pl) you need a fix.
• PageRedirectionNotWorking:
  • Page redirection does not work on some systems, e.g. the thank you page is not shown after registering a user.
• DocumentationScriptAliasMustScanFirst:
  • In case you see the content of the scripts instead of executing the scripts you need to read this.

Minor Issues

• ParserFailsToItalicizeSingleLetter:
  • Minor issue that single letter words do not get bold , italic by enclosing them in '*' or '_' .
• KfmBrowserSupportForEditing:
  • Problem of losing carriage returns when editing topics with KDE KFM browser or W3M? browser.
• DefaultInstallationMailsNewUserInfoToAuthor:
  • This happens in case the installation steps are not followed.

-- PeterThoeny - 08 Jul 2000