25 Nov
2010
25 Nov
'10
8:42 a.m.
+1
Denis
On Wed, Nov 24, 2010 at 14:45, Marius Dumitru Florea <
mariusdumitru.florea(a)xwiki.com> wrote:
+1
Thanks,
Marius
On 11/24/2010 03:19 PM, Thomas Mortagne wrote:
--
Denis Gervalle
SOFTEC sa - CEO
eGuilde sarl - CTO
Hi devs,
$xwiki.parseMessage is used to parse velocity located in a translation
message.
Thing it for me it's very bad (bad design and very bad for
performances and most of all for security) to have velocity in
translation messages which makes $xwiki.parseMessage useless and some
other would say a security hole (see
http://jira.xwiki.org/jira/browse/XWIKI-5684).
So I propose to deprecate it in 2.7 to make sure we don't use that
anymore.
WDYT ?
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs