Modify

Opened 3 years ago

#9055 new defect

Link shows also complete local path on server in a href tag (security issue)

Reported by: pkloud@… Owned by: exarv
Priority: normal Component: PhpdocPlugin
Severity: normal Keywords: security
Cc: Trac Release: 0.12

Description

exmple [phpdoc:index.html]
created link:

<a h.r.e.f="/phpdoc/index.html?path=%2Fvar%2Fwww%2Fwwwhost%2Fproject-dev%2Fwww%2Fdoc%2Findex.html" title="/index.html">

should be:

<a h.r.e.f="/phpdoc/index.html" title="/index.html">

still you can use standard Trac link [/phpdoc/index.html]

(h.r.e.f done because of spam filter rejection - just remove dots...)

Attachments (0)

Change History (0)

Add Comment

Modify Ticket

Action
as new The owner will remain exarv.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.