You are here: Foswiki>Tasks Web>Item14006 (05 Mar 2016, GeorgeClark)Edit Attach

Item14006: Document HOW to INCLUDE URLs

Priority: Normal
Current State: No Action Required
Released In: 2.1.1
Target Release: patch
Applies To: Engine
Component: Documentation
Reported By: VickiBrown
Waiting For:
Last Change By: GeorgeClark
According to System.VarINCLUDE:
ALERT! Foswiki by default is configured to deny URL format includes.

According to System.IncludeTopicsAndWebPages:
HELP If permitted in configure, content from any arbitrary URL may be included also. This is disabled by default because it may be used for malicious purposes, especially on public installations.

However, neither page explain how to permit URL INCLUDEs in configure.

-- VickiBrown - 05 Mar 2016

Search for INCLUDE using the new configure search box. It returns:
  • Security and Authentication > Environment > {DenyDotDotInclude}
  • Security and Authentication > Environment > {INCLUDE}{AllowURLs}

-- GeorgeClark - 05 Mar 2016

Checked in a doc fix under the catch-all documentation task. Setting this to no action.

-- GeorgeClark - 05 Mar 2016

ItemTemplate edit

Summary Document HOW to INCLUDE URLs
ReportedBy VickiBrown
Codebase 2.1.0, trunk
SVN Range
AppliesTo Engine
Component Documentation
Priority Normal
CurrentState No Action Required
TargetRelease patch
ReleasedIn 2.1.1
Topic revision: r3 - 05 Mar 2016, GeorgeClark
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy