Ticket #996 (closed enhancement: inactive)

Opened 6 years ago

Last modified 4 years ago

[PATCH] OpenUrl plugin - open and save webpages with Xinha

Reported by: caugb Owned by: gogo
Priority: normal Milestone: Version 1.0
Component: Plugins Version:
Severity: normal Keywords: patch plugin
Cc:

Description

This plugin adds an navigation bar to the Xinha toolbar. Type a URL and open the page to edit with Xinha. The system will (try to) replace all relative URLS to absolute paths, including images, scripts, CSS, etc. You can also to save a copy of the edited document in server.

See it here: http://cauguanabara.jsbrasil.com/xinha/examples/openurl.html

Attachments

OpenUrl.zip (8.6 kB) - added by caugb 6 years ago.

Change History

Changed 6 years ago by caugb

Changed 5 years ago by ray

  • type changed from defect to enhancement
  • component changed from Plugin_Other to Plugins
  • milestone set to 0.96

this was quite nice if I remember right but there were some thing to do before commiting this

Changed 5 years ago by gogo

  • keywords patch plugin added
  • summary changed from OpenUrl plugin - open and save webpages with Xinha to [PATCH] OpenUrl plugin - open and save webpages with Xinha

Changed 5 years ago by nicholasbs

  • milestone changed from 0.96 to Version 1.0

Changed 4 years ago by gogo

  • status changed from new to closed
  • resolution set to inactive

This plugin is a nice idea on the face of it, but has at least one problem - security, or lack of that I can see.

The PHP file is totally open to abuse, it accepts (POST/GET) an arbitrary "path" (file name, any on the system) and an arbitrary "contents" (any thing at all) and writes the contents to the path. open-url.php?contents=Your+Site+Sucks&path=/path/to/index.html

If this problem were fixed and the plugin updated if necessary, I will commit it, but there can't be that much demand for it otherwise somebody would already have done so. Closing for now, re-open if you want to take this one on.

Note: See TracTickets for help on using tickets.