OpenACS / openacs-4 / packages / acs-tcl / tcl

security-procs.tcl

Tree
Options

oacs-5-10:antoniop:20220825112510

Introduce security::safe_tmpfile_p checking whether a file belongs to the configured tmpfolder and respects other constraints

The plan is to use it to improve input validations

25 Aug 22 antoniop oacs-5-10:antoniop:20220825112510

oacs-5-10:gustafn:20220824145125

Deactivated script-dynamic again

activating "script-dynamic" for script-src prevents resources as the following from loading
<script type="text/javascript" src="/resources/xowiki/bootstrap-treeview/1.2.0/bootstrap-treeview.min.js" nonce="F8843D5CD542FB1CDB4C94C5D13C4E5ECC2E1DCA">

24 Aug 22 gustafn oacs-5-10:gustafn:20220824145125

Loading ...