[pmwiki-users] del.icio.us linkroll

[H. Fox]

On 2/23/06, Rene Visco <rvisco at csdr-cde.ca.gov> wrote:
> Hi,
>
> Works like a charm.  Since it's in intranet, will a hacker be able to
> hack via javascript code in our wiki?  What kind of security risks?

Authors can put any conceivable malicious code between (:html:) and (:htmlend:).

Hagan

> Rene V.
>
> On Feb 23, 2006, at 11:41 AM, H. Fox wrote:
>
> > On 2/23/06, Rene Visco <rvisco at csdr-cde.ca.gov> wrote:
> >> Hi,
> >>
> >> Back to my previous del.icio.us RSS feed problem.  I asked IT staff to
> >> allow it to fetch HTTP requests so they configured the proxy server to
> >> allow my static IP/server to fetch/obtain HTTP requests.
> >>
> >> Again, it doesn't work.  It's more of my problem rather than PMwiki's.
> >> So, I figured maybe it's better to use del.icio.us javascript to
> >> enable
> >> "linkroll" in the sidebar.
> >>
> >> But, I cannot figure how to enable HTML code to work in wiki pages?
> >> I
> >> did use enablehtml.php and I assume it's only for HTML markup, not to
> >> execute HTML codes.
> >>
> >> Here's the javascript code:
> >>
> >> <script type="text/javascript"
> >> src="http://del.icio.us/feeds/js/fuocorav?title=my%20del.icio.us;
> >> icon"></script>
> >> <noscript><a href="http://del.icio.us/fuocorav">my
> >> del.icio.us</a></noscript>
> >>
> >> Will it work on PMWiki?
> >
> > This method works for Javascript:
> >
> > http://www.pmwiki.org/wiki/Cookbook/EnableHTML#altmethod
> >
> > Be aware of the security risks.
> >
> > Hagan
> >
> Rene Visco
>
>