[pmwiki-users] CSS for one (or all) tag in _a single_ page (inline or in head)

[Andrew Standfield]

I don't think there's any more chance of malicious authors doing bad  
things with css then there is with allowing *any* form of markup. If  
you give people an opportunity to edit a page, you run the risk of  
encountering ne'er-do-wells. It comes with the wiki territory. I  
don't think it poses in serious concerns of security.

I think a bigger issue would be novices to CSS creating unstable  
style sheets. I've actually tried to think of ways to combat that or  
if you just want for the admin to be able to include styles. It would  
be interesting to require some kind of password for the (:stylepage:)  
directive. Say, in the form of (:stylepage Group.MyStylePage encrypt 
(mypa$$w0rd):)

I don't think I have the chops to code something like that, though :)

Andy Standfield
http://www.vertigo25.com/
http://www.ipodnirvana.com/


On Aug 24, 2006, at 10:31 AM, Patrick R. Michaud wrote:

> On Thu, Aug 24, 2006 at 10:26:02AM -0700, Andrew Standfield wrote:
>> Clemens,
>>
>> I think what you may want is the stylepage.php solution by Hans. You
>> can find it near the bottom of the CSS in Wiki Pages Recipe: http://
>> pmwiki.org/wiki/Cookbook/CSSInWikiPages
>>
>> After installing, it allows you to make a wiki page that you put
>> standard CSS declarations in. You can then call it from any other
>> page using (:stylepage Group.ExamplePage:).
>
> I hadn't noticed this particular recipe -- it's excellent.
>
> So far I've been reluctant to allow any sort of direct CSS
> modification through pages because it might make it possible
> for malicious authors to do bad things to the site.  But having
> an administrative CSS-via-wiki-page option seems like it could
> be worthwhile.
>
> I'd love to hear others' opinions about this.
>
> Pm
>