[jira] Commented: (INFRA-1308) Configuration option for template location in mirrors.cgi

["Joshua Slive (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/INFRA-1308?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12516960 ] 

Joshua Slive commented on INFRA-1308:
-------------------------------------

I have though of providing such an option, but it is not as simple as you describe. The path passed to template would either have to be a full unix path (which would be ugly and prone to breakage) or mirrors.cgi would need to have built-in knowledge of how the file-system is setup (also prone to breakage). And some serious thought would need to be put into whether this opens possible XSS attack vectors, given that any user would be able to ask any file to be processed as a template.

We used to just have a big configuration file mapping cgi scripts to template files, but that was a huge pain to maintain.

How do other confluence users handle this? Is it really impossible to make confluence live with a non-confluence file in its namespace? Can't you set aside part of your site to be not managed by confluence?

> Configuration option for template location in mirrors.cgi
> ---------------------------------------------------------
>
>                 Key: INFRA-1308
>                 URL: https://issues.apache.org/jira/browse/INFRA-1308
>             Project: Infrastructure
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: Mirrors
>            Reporter: Carsten Ziegeler
>
> The current /www.apache.org/dyn/mirrors/mirrors.cgi searches the template to show in the same location as the original cgi and uses the same name, so for example, if it is felix.apache.org/mirrors.cgi, the called template has to be felix.apache.org/mirrors.html.
> This approach is fine, but causes problems when the website is managed with external tools like confluence where you can't simply add the mirrors.cgi at the correct location. So it would be great if one could pass the template using a parameter like /www.apache.org/dyn/mirrors/mirrors.cgi?template=somewhere.html.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.