[pmwiki-devel] Security issues: Disabling action=source & action=diff?

[christian.ridderstrom at gmail.com]

On Tue, 5 Dec 2006, Crisses wrote:

> Anyone against this?  For it?  Want to help?  Want to do it instead? :)

I don't think action=source should be blocked by default.

Here are two "proper" uses for action=source:
* Editing pages with an external editor (would then require edit acces)
* "Including" wiki pages between wikis

/Christian

-- 
Christian Ridderström, +46-8-768 39 44               http://www.md.kth.se/~chr