r3 - 01 Mar 2005 - 07:52:47 - PeterThoenyYou are here: TWiki >  Codev Web > SecurityPatchBreaksSpacesInFilenames
Tags:
, create new tag
As reported by BenVoui on TWikiIRC, spaces in topic names breaks with Florian's security patch.

This can be cured by removing all the spaces from any existing topic names, but there is still an issue with [[double bracket links]], which currently allow users to create a new topic with spaces.

This is trivially solved by adding the following line before line 3242 of TWiki.pm

$string =~ s/\s//g;
(line 3242 is in function normalizeFilename and should read my @result )

( DevelopBranch has a better fix. )

This will break compatibility with older versions of TWiki, due to the removal of support for spaces in topic, web, path and filenames.

-- CrawfordCurrie - 25 Feb 2005

Correction on [[spaced word link]] rule: This points to SpacedWordLink, e.g. is not affected by this fix.

There is a known issue that it is (halfway) possible to create spaced topics using the GoBox, which is a bug (it should behave the same as the topic link rule)

So this will not break compatibility with existing TWiki topic text.

-- PeterThoeny - 01 Mar 2005

 
Edit | WYSIWYG | Attach | Printable | Raw View | Backlinks: Web, All Webs | History: r3 < r2 < r1 | More topic actions
 
Powered by TWiki
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback SourceForge.net Logo