Opened 12 years ago

Closed 9 years ago

#996 closed enhancement (inactive)

[PATCH] OpenUrl plugin - open and save webpages with Xinha

Reported by: caugb Owned by: gogo
Priority: normal Milestone: Version 1.0
Component: Plugins Version:
Severity: normal Keywords: patch plugin
Cc:

Description

This plugin adds an navigation bar to the Xinha toolbar. Type a URL and open the page to edit with Xinha.
The system will (try to) replace all relative URLS to absolute paths, including images, scripts, CSS, etc.
You can also to save a copy of the edited document in server.

See it here: http://cauguanabara.jsbrasil.com/xinha/examples/openurl.html

Attachments (1)

OpenUrl.zip (8.6 KB) - added by caugb 12 years ago.

Download all attachments as: .zip

Change History (5)

Changed 12 years ago by caugb

comment:1 Changed 11 years ago by ray

  • Component changed from Plugin_Other to Plugins
  • Milestone set to 0.96
  • Type changed from defect to enhancement

this was quite nice if I remember right but there were some thing to do before commiting this

comment:2 Changed 11 years ago by gogo

  • Keywords patch plugin added
  • Summary changed from OpenUrl plugin - open and save webpages with Xinha to [PATCH] OpenUrl plugin - open and save webpages with Xinha

comment:3 Changed 11 years ago by nicholasbs

  • Milestone changed from 0.96 to Version 1.0

comment:4 Changed 9 years ago by gogo

  • Resolution set to inactive
  • Status changed from new to closed

This plugin is a nice idea on the face of it, but has at least one problem - security, or lack of that I can see.

The PHP file is totally open to abuse, it accepts (POST/GET) an arbitrary "path" (file name, any on the system) and an arbitrary "contents" (any thing at all) and writes the contents to the path. open-url.php?contents=Your+Site+Sucks&path=/path/to/index.html

If this problem were fixed and the plugin updated if necessary, I will commit it, but there can't be that much demand for it otherwise somebody would already have done so. Closing for now, re-open if you want to take this one on.

Note: See TracTickets for help on using tickets.