[pmwiki-users] allow my markup only on certain pages? (include context)
Patrick R. Michaud
pmichaud at pobox.com
Fri Nov 10 16:41:55 CST 2006
On Fri, Nov 10, 2006 at 09:34:23PM +0000, Lucian Wischik wrote:
> Anno <anno <at> shroomery.org> writes:
> > Put the markup in local/Groupname.YourPage.php file instead
> > local/config.php, and it will be active only with Group.YourPage.
>
> That doesn't help. The problem is that my Groupname/YourPage
> includes text from an unprivileged group:
> (:include Comments.AnotherPage:)
>
> If I use local/Groupname.YourPage.php to enable the markup
> for my group, then it'll also end up enabling any markup
> that it includes from elsewhere.
>
> My situation is that the markup allows arbitrary html,
> which is a security risk, but the "Comments" group is
> publically writable. That's why they're not allowed to
> use my markup.
Another possibility might be to use a $ROSPattern
(replace on save) to automatically remove the unwanted markup
from the Comments.* pages whenever they're saved.
Pm
More information about the pmwiki-users
mailing list