Opened 12 years ago

#9055 new defect

Link shows also complete local path on server in a href tag (security issue)

Reported by: pkloud@… Owned by: Robert Verspuy
Priority: normal Component: PhpdocPlugin
Severity: normal Keywords: security
Cc: Trac Release: 0.12


exmple [phpdoc:index.html]
created link:

<a h.r.e.f="/phpdoc/index.html?path=%2Fvar%2Fwww%2Fwwwhost%2Fproject-dev%2Fwww%2Fdoc%2Findex.html" title="/index.html">

should be:

<a h.r.e.f="/phpdoc/index.html" title="/index.html">

still you can use standard Trac link [/phpdoc/index.html]

(h.r.e.f done because of spam filter rejection - just remove dots...)

Attachments (0)

Change History (0)

Modify Ticket

Change Properties
Set your email in Preferences
as new The owner will remain Robert Verspuy.

Add Comment

E-mail address and name can be saved in the Preferences.

Note: See TracTickets for help on using tickets.