Hi,
I just realized, the password recovery function unveils a user's password.
In a wiki with registration, and Email verification, where the XWiki
space must currently be enabled to be viewed by everybdy, this could
be used by spammers(and others who like to collect email addresses) to
harvest email addresses by caling the resetpassword function for every
user they see on the "AllUsers" page.
I'd propose to not show the Email address to which a password reminder is sent.
Henning
--
Henning Sprang
http://www.sprang.de | http://lazyb0y.blogspot.com/
Hi Asiri,
On Feb 23, 2009, at 1:37 PM, asiri (SVN) wrote:
> Author: asiri
> Date: 2009-02-23 13:37:50 +0100 (Mon, 23 Feb 2009)
> New Revision: 16999
>
> Modified:
> platform/core/trunk/xwiki-officeimporter/src/test/java/org/xwiki/
> officeimporter/internal/cleaner/OpenOfficeHTMLCleanerTest.java
> Log:
> XWIKI-3259: Table headers are not handled properly
>
> * Added a unit test.
[snip]
> /**
> + * Test proper cleaning of {@code <th>} elements.
> + */
> + public void testTableHeaderItemCleaning()
> + {
> + // Isolated paragraph elements inside 'th' elements should
> be removed.
> + String html =
> + header + "<table><thead><tr><th><p>Test</p></th></tr></
> thead><tbody><tr><td/></tr></tbody></table>"
> + + footer;
> + Document doc = cleaner.clean(new StringReader(html));
> + NodeList nodes = doc.getElementsByTagName("th");
> + Node hearderItemContent = nodes.item(0).getFirstChild();
> + assertEquals(Node.TEXT_NODE,
> hearderItemContent.getNodeType());
> + assertEquals("Test", hearderItemContent.getNodeValue());
Why is this only for th and not for td cells too?
Is this specific to the office importer? It looks very generic to me,
isn't it?
Why do paragraphs need to be removed?
What if there are 2 paragraphs elements? what happens? Do you have a
test for that too?
Thanks
-Vincent
Hi there,
I am using java with XmlRPC to connect and send xml messages to a payment
gateway.
- My main issue is that the payment gateway accepts the requests in a
specific format like:
<merchantid>1234567</merchantid>
<account>testaccount</testaccount>
<card>
<number>....and so on
So can anyone help me on how to send xml using this format through xmlrpc. i
have checked struct but that also does not meet my requirement.
- Also is there anyway to trap the request and response message form xmlrpc
as this would help in testing.
- Apart from this does the payment gateway also need to have a xmlrpc
server. Would my XmlRPC request work if it is not?
Please help
Thanks in advance.
--
View this message in context: http://n2.nabble.com/Issues-with-XmlRPC-tp2377960p2377960.html
Sent from the XWiki- Dev mailing list archive at Nabble.com.
Hi devs,
Due to some critical bugs and missing features, the release was
postponed for a long period.
Still the development process is way ahead of what was intended for
XWord 1.0
This is how the old roadmap looked like:
http://dev.xwiki.org/xwiki/bin/view/Design/MicrosoftOfficeAddin#HFirstversi…
As you can see XWord 1.0 was intended to be an export to wiki tool and
only XWord 1.1 should enable editing wiki pages.
Sorry for not keeping you up to date on the mailing list.
This is the new roadmap for XWord:
- 1.0 M1
- Wiki Explorer - done
- Attachment Upload - done
- Attachment Download - done
- Export word documents - done
- Edit/Save wiki pages - done
- Save pages with user specified syntax - done
- Protect essential pages from editing - done
- Export using filtered html - done
- Export with non-filtered html - buggy
- Deployment and infrastructure - problematic because it uses ClickOnce.
- 1.0 M2 - 2-3 weeks from M1
- Solve as many reported bugs
- Improve html filters
- Introduce the XML-RPC communication mode
- Basic macro support(prevent the user from editing macro generated
html)
- 1.0 RC1 - 1-2 weeks from M2
- Bug fixing
- Stable and ergonomic UI
- Remove the sever package and rely only on XML-RPC
- 1.0 Final - 1-2
- Rock solid UI
- Production quality html output and wiki syntax conversion.
Please tell me your opinion.
Thanks,
Florin
vmassol (SVN) wrote:
> Author: vmassol
> Date: 2009-02-22 20:24:02 +0100 (Sun, 22 Feb 2009)
> New Revision: 16991
>
> Modified:
> platform/core/branches/xwiki-core-1.8/xwiki-core/src/main/java/com/xpn/xwiki/doc/XWikiDocument.java
> platform/core/branches/xwiki-core-1.8/xwiki-core/src/test/java/com/xpn/xwiki/doc/XWikiDocumentTest.java
> Log:
> XWIKI-3228: Error while saving xwiki 2.0 documents containing anchor links
>
> Fixed bugs introduced in rev 16482 (XWIKI-281) for XWiki Syntax 2.0. The underlying code is pretty flaky and there are other potential errors in the code...
>
> Merged from trunk (rev 16990)
>
> Modified: platform/core/branches/xwiki-core-1.8/xwiki-core/src/main/java/com/xpn/xwiki/doc/XWikiDocument.java
> ===================================================================
> --- platform/core/branches/xwiki-core-1.8/xwiki-core/src/main/java/com/xpn/xwiki/doc/XWikiDocument.java 2009-02-22 18:11:58 UTC (rev 16990)
> +++ platform/core/branches/xwiki-core-1.8/xwiki-core/src/main/java/com/xpn/xwiki/doc/XWikiDocument.java 2009-02-22 19:24:02 UTC (rev 16991)
> + // Verify that the link is not an autolink (i.e. a link to the current document) and only add
> + // if the link is not already in the list.
> + // TODO: Would be better to use a Set instead of a Link but this needs to change the API and I'm
s/Link/List
Also, can't you use a Set internally and transform it to a list at the
end? Does a Set provide better performance than List.contains?
> + // not ready to risk this right now: Vincent Massol, 22/02/2009 close to the 1.8RC2 release...
> + if (!document.getFullName().equals(getFullName()) && !pageNames.contains(document.getFullName())) {
> + pageNames.add(document.getFullName());
> + }
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
Hi all,
I added a new alternative interface to wikimodel (IWemPositionListener)
in order
to pass line and column position for each begining/end of block event.
Initial scanner has been modified too.
Modifications donc break IWemListener clients because I added a wrapper
for that.
I rencently proposed a patch,
http://code.google.com/p/wikimodel/issues/detail?id=112 ,
some test/event hasn't been written yet.
Once this has been done I will workon the core, I intend to :
- add a class (named Location) that wrap line/column number
- add to AbstractBlock a Location reference, getters and setters for
this new type
- modify XDOMGeneratorListener in order to set AbstractBlock Location
reference
- write an XHTML renderer that also print location.
Please tell if you think something is wrong.
Thanks,
Lucien Pereira
Hi,
Ludovic pointed out to me that many wikis include some kind of tutorial
space explaining what a wiki is and how it can be used. I have checked
PBWiki & Confluence and both of them include a couple pages explaining
what's a wiki. On top of this, the current homepage, which included some
information about what a wiki is and what it can be used for, will soon be
replaced by a nicer one with way less content.
Thus I'd like to contribute a XAR with 4-5 pages helping new users getting
started with our wiki. Here's what I'd envision for the XAR's contents:
- What's a wiki and what can it be used for
- Edit a page and create a link
- Change your wiki's logo and move the panels around
- Protect the wiki (basic rights setup for a couple configurations:
public / private wiki)
Basically the first steps most XWiki users will undertake when arriving on a
blank XWiki Enterprise instance.
Thus I'd like your PoW on 1) the idea itself & 2) contents to include (keep
in mind that this should stay short though). If it's welcomed positively, do
I need to send a vote?
If the idea is accepted I'll handle the technical details with JV & Ludo.
Thanks,
Guillaume
--
Guillaume Lerouge
Product Manager - XWiki
Skype ID : wikibc
http://guillaumelerouge.com/
Hi guys,
In order to implement the chart macro
(http://jira.xwiki.org/jira/browse/XWIKI-2883) , i propose the following:
- Create a new TableBlockDataSource which implements the
com.xpn.xwiki.plugin.charts.source.DataSource and which will take data
from a table contained within a Wiki2.0 document.
- Use the existing ChartPlugin for aquiring this new data source and
generate the graph.
This new datasource, in order to be compatible with the chartPlugin,
gets its parameters via a Map<String, String>. So I'm thinking of
passing the current document and the table number as strings encoded in
such a Map and then, in the datasource parsing the document and getting
its DOM tree and then extracting the data from it.
What do you think about this approach?
Tnx,
Dan