www-infrastructure-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Joshua Slive (JIRA)" <j...@apache.org>
Subject [jira] Commented: (INFRA-1308) Configuration option for template location in mirrors.cgi
Date Wed, 01 Aug 2007 13:09:52 GMT

    [ https://issues.apache.org/jira/browse/INFRA-1308?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12516960
] 

Joshua Slive commented on INFRA-1308:
-------------------------------------

I have though of providing such an option, but it is not as simple as you describe. The path
passed to template would either have to be a full unix path (which would be ugly and prone
to breakage) or mirrors.cgi would need to have built-in knowledge of how the file-system is
setup (also prone to breakage). And some serious thought would need to be put into whether
this opens possible XSS attack vectors, given that any user would be able to ask any file
to be processed as a template.

We used to just have a big configuration file mapping cgi scripts to template files, but that
was a huge pain to maintain.

How do other confluence users handle this? Is it really impossible to make confluence live
with a non-confluence file in its namespace? Can't you set aside part of your site to be not
managed by confluence?

> Configuration option for template location in mirrors.cgi
> ---------------------------------------------------------
>
>                 Key: INFRA-1308
>                 URL: https://issues.apache.org/jira/browse/INFRA-1308
>             Project: Infrastructure
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: Mirrors
>            Reporter: Carsten Ziegeler
>
> The current /www.apache.org/dyn/mirrors/mirrors.cgi searches the template to show in
the same location as the original cgi and uses the same name, so for example, if it is felix.apache.org/mirrors.cgi,
the called template has to be felix.apache.org/mirrors.html.
> This approach is fine, but causes problems when the website is managed with external
tools like confluence where you can't simply add the mirrors.cgi at the correct location.
So it would be great if one could pass the template using a parameter like /www.apache.org/dyn/mirrors/mirrors.cgi?template=somewhere.html.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message