Item13601: Page cache pollution by illegal path components.
Priority: Urgent
Current State: Closed
Released In: 2.0.2
Target Release: patch
Applies To: Engine
Component:
Branches: master
This happens frequently on Foswiki.org, ioe on
Community.WebHome and now
System.WebHome:
A link such as
<a href="%SCRIPTURLPATH{"view"}%/Main/WebHome&#;gt">Pollute my cache</a>
... will store the "Missing or illegal web name" warning screen into the page cache then accessible visiting the real topic.
This is probably not related to the page cache but to
Foswiki::_parsePath()
being called with a bad path and then returning a default value.
Solution for
Foswiki::PageCache::isCacheable
is to return false in case there is an
invalidWeb
or
invalidTopic
being found as part of the current
$session
.
--
MichaelDaum - 03 Aug 2015
I've patched Foswiki.org as this is most annoying.
--
MichaelDaum - 03 Aug 2015