diff options
author | smcv <smcv@web> | 2017-05-14 08:01:09 -0400 |
---|---|---|
committer | admin <admin@branchable.com> | 2017-05-14 08:01:09 -0400 |
commit | 1f2f8d5f776724a6f9918c8e27078bfaedcf045e (patch) | |
tree | 5aa37b530547d89ca2eafbfd162ef765252caf5e /doc | |
parent | 75f905a18aa68975c4194386302e7a1d223a4d87 (diff) | |
download | ikiwiki-1f2f8d5f776724a6f9918c8e27078bfaedcf045e.tar ikiwiki-1f2f8d5f776724a6f9918c8e27078bfaedcf045e.tar.gz |
Added a comment
Diffstat (limited to 'doc')
-rw-r--r-- | doc/forum/ikwiki_with_AsciiDoc:_page_cannot_be_rendered/comment_2_750f5682996d5186e48347f5b1723b17._comment | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/doc/forum/ikwiki_with_AsciiDoc:_page_cannot_be_rendered/comment_2_750f5682996d5186e48347f5b1723b17._comment b/doc/forum/ikwiki_with_AsciiDoc:_page_cannot_be_rendered/comment_2_750f5682996d5186e48347f5b1723b17._comment new file mode 100644 index 000000000..b7fb2d4ce --- /dev/null +++ b/doc/forum/ikwiki_with_AsciiDoc:_page_cannot_be_rendered/comment_2_750f5682996d5186e48347f5b1723b17._comment @@ -0,0 +1,24 @@ +[[!comment format=mdwn + username="smcv" + avatar="http://cdn.libravatar.org/avatar/0ee943fe632ff995f6f0f25b7167d03b" + subject="comment 2" + date="2017-05-14T12:01:08Z" + content=""" +The AsciiDoc plugin is not part of ikiwiki, and none of the ikiwiki maintainers +develop or use it. You might get better results by contacting its authors, +or by reading its source code or the source code of the third-party libraries +or tools that it uses. + +[Searching for the error +message](https://codesearch.debian.net/search?q=ifeval+invalid+safe+document) +is probably a good starting point for understanding what is happening here. + +I suspect that what is happening might be that the plugin puts asciidoc into +some sort of \"safe mode\" so that wiki editors cannot cause arbitrary code +execution, but you are making use of asciidoc features that can execute +arbitrary code, which the asciidoc implementation forbids. + +In general, ikiwiki plugins are expected to arrange for filtering or +configuration to be carried out so that the ability to edit the wiki does +not give an attacker the ability to execute arbitrary code on the server. +"""]] |