diff options
| author | joey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071> | 2007-03-21 18:52:56 +0000 |
|---|---|---|
| committer | joey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071> | 2007-03-21 18:52:56 +0000 |
| commit | c8b4ba354f82fbbcebbbfca65b40a047f9920525 (patch) | |
| tree | 6dd5bd85031e42da9a3c65d1c5c3f9bfacfdfcda /doc/openid.mdwn | |
| parent | 829d097dc52b6a8f50297406affc67fbc08dccb7 (diff) | |
| download | ikiwiki-c8b4ba354f82fbbcebbbfca65b40a047f9920525.tar ikiwiki-c8b4ba354f82fbbcebbbfca65b40a047f9920525.tar.gz | |
* Fix a security hole that allowed insertion of unsafe content via the meta
plugins's support for inserting html link and meta tags. Now such content
is passed through the htmlscrubber like everything else.
* Unfortunatly, that means that some valid uses of those tags are no longer
usable, and special case methods needed to be added for including
stylesheets, and for doing openid delegation. If you use either of these
in your wiki, it will need to be modified. See the meta plugin docs
for details.
Diffstat (limited to 'doc/openid.mdwn')
| -rw-r--r-- | doc/openid.mdwn | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/openid.mdwn b/doc/openid.mdwn index 5037ac4f7..a8ce46f08 100644 --- a/doc/openid.mdwn +++ b/doc/openid.mdwn @@ -28,5 +28,5 @@ registration process when using OpenID. It's also possible to make a page in the wiki usable as an OpenID url, by delegating it to an openid server. Here's an example of how to do that: - \[[meta link="http://www.myopenid.com/server" rel="openid.server"]] - \[[meta link="http://yourid.myopenid.com/" rel="openid.delegate"]] + \\[[meta openid="http://yourid.myopenid.com/" + server="http://www.myopenid.com/server"]] |