[pmwiki-users] Is a pagelist fmt supposed to be overridable via request=1?
5ko at 5ko.fr
Thu Nov 13 11:25:30 CST 2014
On 13.11.2014 17:45, Randy Brown wrote:
> Is a pagelist fmt supposed to be overridable via request=1? I notice
It is not specifically forbidden but I'm not sure if it is desirable to
work. People may access to your pagelists in ways you didn't
specifically allow. Can this be a security issue? I don't know.
Does anyone rely on this feature working?
> it doesn't always work. See
> If it's supposed to work, then I'd like to add a PITS entry to fix it.
> If it's not supported, or is only supported in certain cases, then I'd
> like to document the restrictions.
> pmwiki-users mailing list
> pmwiki-users at pmichaud.com
More information about the pmwiki-users