24 Sep
2013
24 Sep
'13
11:29 p.m.
Hey all,
I have created a new application(appwithinmins) from the create your own functionality of
xwiki.
Now I want to add an entry, so I do add an entry on my application homepage. But I want to
pass some default values in the form so that it remains there and repopulate the creating
the new entry form.
Also is there any class or plug in that I can use to modify or change 'Add an
Entry' function on the homepage of the application created.
How to do this? Can anyone help?
Thanks.
-----Original Message-----
From: devs-bounces(a)xwiki.org [mailto:devs-bounces@xwiki.org] On Behalf Of
devs-request(a)xwiki.org
Sent: Tuesday, September 24, 2013 5:05 PM
To: devs(a)xwiki.org
Subject: devs Digest, Vol 75, Issue 54
Send devs mailing list submissions to
devs(a)xwiki.org
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.xwiki.org/mailman/listinfo/devs
or, via email, send a message with subject or body 'help' to
devs-request(a)xwiki.org
You can reach the person managing the list at
devs-owner(a)xwiki.org
When replying, please edit your Subject line so it is more specific than "Re:
Contents of devs digest..."
Today's Topics:
1. Regarding editing the redirecting page (Prachi Maheshwari)
2. Re: While creating an new entry on a new application/ Editing
the application (prachi maheshwari)
3. Re: Reading Get/Post variables from url (prachi maheshwari)
4. Re: Regarding editing the redirecting page
(Clemens Klein-Robbenhaar)
5. Regarding redirecting using Url variables (Prachi Maheshwari)
6. Re: Security concerns (Thomas Delafosse)
----------------------------------------------------------------------
Message: 1
Date: Tue, 24 Sep 2013 16:04:10 +0000
From: Prachi Maheshwari <prachi.maheshwari(a)netboss.com>
To: "devs(a)xwiki.org" <devs(a)xwiki.org>
Subject: [xwiki-devs] Regarding editing the redirecting page
Message-ID:
<1baead0e63224f38ae46fcdd5ec57e37(a)BL2PR05MB196.namprd05.prod.outlook.com>
Content-Type: text/plain; charset="us-ascii"
Hey everyone,
I have created a redirecting page in my Xwiki space(say A) which redirects every request
that comes to it to other page(say B). Now I want to modify some things in the Page A, but
cannot since its redirected to B every time. I have tried
http:/<server>/Device/Default+Device?language=en and also
http:/<server>/Device/Default+Device?editor=WYSIWYG;
but nothing is helping, with everything I goto page B. I want to edit page A so please
temme some other way.
------------------------------
Message: 2
Date: Tue, 24 Sep 2013 09:11:41 -0700 (PDT)
From: prachi maheshwari <prachi.maheshwari(a)netboss.com>
To: devs(a)xwiki.org
Subject: Re: [xwiki-devs] While creating an new entry on a new
application/ Editing the application
Message-ID:
<5051ce6db66f4d698e9eac7c5ef1630e(a)BL2PR05MB196.namprd05.prod.outlook.com>
Content-Type: text/plain; charset=us-ascii
Hey Marius,
I have tried working with two Long text field palates and I have removed one content box.
But now when I create an entry it doesn't show me any of the two long text boxes.
Do I have to change some where else also?? To get them displayed on my creating the entry
page??
thanks
From: Marius Dumitru Florea [via XWiki] [mailto:ml-node+s475771n7587235h16@n2.nabble.com]
Sent: Tuesday, September 24, 2013 5:16 AM
To: Prachi Maheshwari
Subject: Re: While creating an new entry on a new application/ Editing the application
I'm guessing that you are trying to add two 'Content' fields. Only one is
allowed. See http://jira.xwiki.org/browse/XWIKI-8585 . You should use the 'Long
Text' field instead. See
http://extensions.xwiki.org/xwiki/bin/view/Extension/App+Within+Minutes+App…
. If you already tried this then make sure the application was properly saved.
Hope this helps,
Marius
On Mon, Sep 23, 2013 at 9:49 PM, prachi maheshwari <[hidden
email]</user/SendEmail.jtp?type=node&node=7587235&i=0>> wrote:
I want two long descriptions on my creating an entry
page for
different kind of information. But even if I select two Description
Field Palates while customizing the application there is only one
which comes while creating a new Entry in that application. Can
someone please suggest me the other way of doing it.
--
View this message in context:
http://xwiki.475771.n2.nabble.com/While-creating-an-new-entry-on-a-new
-application-Editing-the-application-tp7587225.html
Sent from the XWiki- Dev mailing list archive at Nabble.com.
_______________________________________________
devs mailing list
[hidden email]</user/SendEmail.jtp?type=node&node=7587235&i=1>
http://lists.xwiki.org/mailman/listinfo/devs
_______________________________________________
devs mailing list
[hidden email]</user/SendEmail.jtp?type=node&node=7587235&i=2>
http://lists.xwiki.org/mailman/listinfo/devs
________________________________
If you reply to this email, your message will be added to the discussion below:
http://xwiki.475771.n2.nabble.com/While-creating-an-new-entry-on-a-new-appl…
To unsubscribe from While creating an new entry on a new application/ Editing the
application, click
here<http://xwiki.475771.n2.nabble.com/template/NamlServlet.jtp?macro=un…gyNjU3Nw==>.
NAML<http://xwiki.475771.n2.nabble.com/template/NamlServlet.jtp?macro=ma…
--
View this message in context:
http://xwiki.475771.n2.nabble.com/While-creating-an-new-entry-on-a-new-appl…
Sent from the XWiki- Dev mailing list archive at Nabble.com.
------------------------------
Message: 3
Date: Tue, 24 Sep 2013 09:12:32 -0700 (PDT)
From: prachi maheshwari <prachi.maheshwari(a)netboss.com>
To: devs(a)xwiki.org
Subject: Re: [xwiki-devs] Reading Get/Post variables from url
Message-ID:
<46387884658642d8b3926fd614376d18(a)BL2PR05MB196.namprd05.prod.outlook.com>
Content-Type: text/plain; charset=UTF-8
Thank you everyone.
$request.get(?param?); works
Thanks
From: Denis Gervalle-2 [via XWiki] [mailto:ml-node+s475771n7587236h47@n2.nabble.com]
Sent: Tuesday, September 24, 2013 5:47 AM
To: Prachi Maheshwari
Subject: Re: Reading Get/Post variables from url
On Tue, Sep 24, 2013 at 10:02 AM, Valdis V?toli?? <[hidden
email]</user/SendEmail.jtp?type=node&node=7587236&i=0>>wrote:
In short:
$request.getParameter('param')
In shorter: :)
$request.param
PS: Your question is appropriate for the user list, the devs list is about the development
of XWiki itself. See http://dev.xwiki.org/xwiki/bin/view/Community/MailingLists. Thanks.
Valdis
_______________________________________________
devs mailing list
[hidden email]</user/SendEmail.jtp?type=node&node=7587236&i=4>
http://lists.xwiki.org/mailman/listinfo/devs
--
Denis Gervalle
SOFTEC sa - CEO
eGuilde sarl - CTO
_______________________________________________
devs mailing list
[hidden email]</user/SendEmail.jtp?type=node&node=7587236&i=5>
http://lists.xwiki.org/mailman/listinfo/devs
________________________________
If you reply to this email, your message will be added to the discussion below:
http://xwiki.475771.n2.nabble.com/Reading-Get-Post-variables-from-url-tp758…
To unsubscribe from Reading Get/Post variables from url, click
here<http://xwiki.475771.n2.nabble.com/template/NamlServlet.jtp?macro=un…gyNjU3Nw==>.
NAML<http://xwiki.475771.n2.nabble.com/template/NamlServlet.jtp?macro=ma…
--
View this message in context:
http://xwiki.475771.n2.nabble.com/Reading-Get-Post-variables-from-url-tp758…
Sent from the XWiki- Dev mailing list archive at Nabble.com.
------------------------------
Message: 4
Date: Tue, 24 Sep 2013 18:37:15 +0200
From: Clemens Klein-Robbenhaar <c.robbenhaar(a)espresto.com>
To: devs(a)xwiki.org
Subject: Re: [xwiki-devs] Regarding editing the redirecting page
Message-ID: <5241BFBB.1050406(a)espresto.com>
Content-Type: text/plain; charset=ISO-8859-1
On 09/24/2013 06:04 PM, Prachi Maheshwari wrote:
Hi,
You have access to the request from velocity and groovy, check for
$request
in scripting reference [1].
[1] http://platform.xwiki.org/xwiki/bin/view/SRD/Navigation
Br,
Jeremie
Le 23 sept. 2013 20:52, "prachi maheshwari" <
[hidden
email]</user/SendEmail.jtp?type=node&node=7587236&i=1>>
a ?crit :
> Hey everyone,
> I wanna read and access the variables passed in url in Velocity on
> different Xwiki Pages. Please suggest me a method. I have tried
> something in
groovy
> and velocity but I want to use only one
macro/language for it.
> Thanks
>
>
>
> --
> View this message in context:
>
http://xwiki.475771.n2.nabble.com/Reading-Get-Post-variables-from-url-
tp7587226.html
Sent from
the XWiki- Dev mailing list archive at Nabble.com.
_______________________________________________
devs mailing list
[hidden email]</user/SendEmail.jtp?type=node&node=7587236&i=2>
http://lists.xwiki.org/mailman/listinfo/devs
_______________________________________________
devs mailing list
[hidden email]</user/SendEmail.jtp?type=node&node=7587236&i=3>
http://lists.xwiki.org/mailman/listinfo/devs Hey everyone,
I have created a redirecting page in my Xwiki space(say A) which
redirects every request that comes to it to other page(say B). Now I
want to modify some things in the Page A, but cannot since its
redirected to B every time. I have tried
http:/<server>/Device/Default+Device?language=en and also
http:/<server>/Device/Default+Device?editor=WYSIWYG;
but nothing is helping, with everything I goto page B. I want to edit
page A so please temme some other way.
How did you create the redirect?
You need to tell XWiki you want to have the edit view, so maybe something like
http:/<server>/edit/Device/Default+Device?editor=WYSIWYG might help
Clemens
------------------------------
Message: 5
Date: Tue, 24 Sep 2013 20:46:01 +0000
From: Prachi Maheshwari <prachi.maheshwari(a)netboss.com>
To: "devs(a)xwiki.org" <devs(a)xwiki.org>
Subject: [xwiki-devs] Regarding redirecting using Url variables
Message-ID:
<292aef4f1b5b4584a17e4a6874223c9a(a)BL2PR05MB196.namprd05.prod.outlook.com>
Content-Type: text/plain; charset="us-ascii"
Hey everyone, I am using
$response.sendRedirect("http://<server>/abc?A=${A}&B=${B})
For redirecting onto another page. I also need to pass some variables from the url but
this ain't working. Please help.
Also, I am passing four to five variables and the url is getting broken and only passes
value until a limit only.
So, is there any kind of limit for the url length for xwiki specifically??
Also is there any other method for doing so??
-----Original Message-----
From: devs-bounces(a)xwiki.org [mailto:devs-bounces@xwiki.org] On Behalf Of
devs-request(a)xwiki.org
Sent: Tuesday, September 24, 2013 8:00 AM
To: devs(a)xwiki.org
Subject: devs Digest, Vol 75, Issue 53
Send devs mailing list submissions to
devs(a)xwiki.org
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.xwiki.org/mailman/listinfo/devs
or, via email, send a message with subject or body 'help' to
devs-request(a)xwiki.org
You can reach the person managing the list at
devs-owner(a)xwiki.org
When replying, please edit your Subject line so it is more specific than "Re:
Contents of devs digest..."
Today's Topics:
1. Re: Reading Get/Post variables from url (Valdis V?toli??)
2. Re: While creating an new entry on a new application/ Editing
the application (Marius Dumitru Florea)
3. Re: Reading Get/Post variables from url (Denis Gervalle)
----------------------------------------------------------------------
Message: 1
Date: Tue, 24 Sep 2013 11:02:10 +0300
From: Valdis V?toli?? <valdis.vitolins(a)odo.lv>
To: XWiki Developers <devs(a)xwiki.org>
Subject: Re: [xwiki-devs] Reading Get/Post variables from url
Message-ID: <1380009730.2421.0.camel@vostro>
Content-Type: text/plain; charset="UTF-8"
In short:
$request.getParameter('param')
Valdis
Hi,
You have access to the request from velocity and groovy, check for
$request in scripting reference [1].
[1] http://platform.xwiki.org/xwiki/bin/view/SRD/Navigation
Br,
Jeremie
Le 23 sept. 2013 20:52, "prachi maheshwari"
<prachi.maheshwari(a)netboss.com> a ?crit :
------------------------------
Message: 2
Date: Tue, 24 Sep 2013 12:15:29 +0300
From: Marius Dumitru Florea <mariusdumitru.florea(a)xwiki.com>
To: XWiki Developers <devs(a)xwiki.org>
Subject: Re: [xwiki-devs] While creating an new entry on a new
application/ Editing the application
Message-ID:
<CALZcbBariN8a-tX+7LKaUt8utFOJWZKf6CNhwr2t-PUDp_FVLg(a)mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
I'm guessing that you are trying to add two 'Content' fields. Only one is
allowed. See http://jira.xwiki.org/browse/XWIKI-8585 . You should use the 'Long
Text' field instead. See
http://extensions.xwiki.org/xwiki/bin/view/Extension/App+Within+Minutes+App…
. If you already tried this then make sure the application was properly saved.
Hope this helps,
Marius
On Mon, Sep 23, 2013 at 9:49 PM, prachi maheshwari <prachi.maheshwari(a)netboss.com>
wrote:
Hey everyone,
I wanna read and access the variables passed in url in Velocity on
different Xwiki Pages. Please suggest me a method. I have tried
something in groovy and velocity but I want to use only one
macro/language for it.
Thanks
--
View this message in context:
http://xwiki.475771.n2.nabble.com/Reading-Get-Post-variables-from-ur
l-tp7587226.html Sent from the XWiki- Dev mailing list archive at
Nabble.com.
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs I want two long descriptions on my creating an entry
page for
different kind of information. But even if I select two Description
Field Palates while customizing the application there is only one
which comes while creating a new Entry in that application. Can
someone please suggest me the other way of doing it.
--
View this message in context:
http://xwiki.475771.n2.nabble.com/While-creating-an-new-entry-on-a-new
-application-Editing-the-application-tp7587225.html
Sent from the XWiki- Dev mailing list archive at Nabble.com.
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
------------------------------
Message: 3
Date: Tue, 24 Sep 2013 11:46:13 +0200
From: Denis Gervalle <dgl(a)softec.lu>
To: valdis.vitolins(a)odo.lv, XWiki Developers <devs(a)xwiki.org>
Subject: Re: [xwiki-devs] Reading Get/Post variables from url
Message-ID:
<CADb+PMpE6oaj=cJ4EQvE5_9X+4NvtHFSQ_kZV1v=WMC9v5GcNQ(a)mail.gmail.com>
Content-Type: text/plain; charset=UTF-8
On Tue, Sep 24, 2013 at 10:02 AM, Valdis V?toli?? <valdis.vitolins(a)odo.lv>wrote;wrote:
In short:
$request.getParameter('param')
In shorter: :)
$request.param
PS: Your question is appropriate for the user list, the devs list is about the development
of XWiki itself. See http://dev.xwiki.org/xwiki/bin/view/Community/MailingLists. Thanks.
Valdis
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
--
Denis Gervalle
SOFTEC sa - CEO
eGuilde sarl - CTO
------------------------------
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
End of devs Digest, Vol 75, Issue 53
************************************
------------------------------
Message: 6
Date: Tue, 24 Sep 2013 23:04:56 +0200
From: Thomas Delafosse <thomas.delafosse(a)xwiki.com>
To: XWiki Developers <devs(a)xwiki.org>
Subject: Re: [xwiki-devs] Security concerns
Message-ID:
<CAHXP8+cXffA=N=HMvEc6z_co+qPyT8pP44D6sMUgMTpMv_g-nA(a)mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Hello Christian,
Sorry to have been so long before answering ! Here's at least a
little patch that you can easily apply to make HTML macro secure. Note that
a lot of HTML macros that are in wikis default pages won't work anymore !
Note also that you need the JSOUP package (http://jsoup.org/download) in
your wiki libs to make it work, as this is the library I used for the
verification of the html macro content. For more liberty, you can instead
try to make a custom verification such as the one I made for the wiki
syntax, it's up to you :). To finish, note also that you should skip the
tests when building the new xwiki-rendering-macro-html package, as I didn't
adapt them (these test contains quite a lot of tags and attributes that
should be forbidden for security reasons).
As I probably said earlier, a cleaner way to do that is to put the html
macro in the platform code, and to add a check for programming rights. I
got something like that somewhere, but I should rework it a bit when I got
some time to do it. But at least this patch should let see how this is
supposed to work !
Of course if you have any questions, feel free to ask them, and I would try
to reply a bit faster this time ;)
Hope this helps !
Thomas
On Tue, Sep 17, 2013 at 11:34 AM, Vincent Massol <vincent(a)massol.net> wrote:
Hi,
You have access to the request from velocity and groovy, check for
$request
in scripting reference [1].
[1] http://platform.xwiki.org/xwiki/bin/view/SRD/Navigation
Br,
Jeremie
Le 23 sept. 2013 20:52, "prachi maheshwari" <
prachi.maheshwari(a)netboss.com>
a ?crit :
> Hey everyone,
> I wanna read and access the variables passed in url in Velocity on
> different Xwiki Pages. Please suggest me a method. I have tried
> something in
groovy
> and velocity but I want to use only one
macro/language for it.
> Thanks
>
>
>
> --
> View this message in context:
>
http://xwiki.475771.n2.nabble.com/Reading-Get-Post-variables-from-url-
tp7587226.html
Sent from
the XWiki- Dev mailing list archive at Nabble.com.
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
On Sep 17, 2013, at 10:26 AM, Christian Meunier <
christian.meunier(a)magelo.com> wrote:
Thanks Vincent for the heads up !
Any chance Marius or some other dev can have a look the XSS in wiki
Syntax PR ?
I have tested it, beside the bug I have spotted, it worked just fine for
me.
Would be nice to include this one in 5.2 because right now, it just too
trivial to
do XSS injection with the wiki syntax..
It seems too large a patch to make it in 5.2 now (we're reaching RC1) but
it could go in 5.3M1.
Thanks
-Vincent
Thanks !
--
Chris
On 9/17/2013 14:43, Vincent Massol wrote:
> Hi Christian,
>
> On Sep 17, 2013, at 8:16 AM, Christian Meunier <
christian.meunier(a)magelo.com> wrote:
>
>> Hi Thomas,
>>
>> Hope you had good holidays !
>>
>> I was wondering if you could give me an update on the work you started
for
the html macro ?
>> Btw, have you noticed my comment on
https://github.com/xwiki/xwiki-rendering/pull/6#discussion_r5632662 ?
>>
>> Also, question for the devs, I see that the 5.2 is near the corner and
yet
many of Thomas's security PRs are still pending..
> Several have been applied (by Marius).
>
>> Shouldnt those security PRs be a priority ? Is there a roadmap/target
for
those ?
> FYI ThomasD was working lately on signed
scripts which will fix a lot
of current potential security issues. This is a big
piece of work. I said
"was" because Thomas is now going abroad in the context of his school
studies and will probably be less available. The good news is that Denis
Gervalle has agreed to carry on his work and more generally to focus on
security issues for the coming 3 months at least.
>
> So you should see progress in this area :)
>
> Thanks
> -Vincent
>
>> Thanks !
>>
>> --
>> Chris
>>
>> On 8/10/2013 05:10, Thomas Delafosse wrote:
>>> Hello Christian,
>>>
>>> It's nice to see that you are interested in XWiki security :)
>>> As for the secure html macro I've been working on, there's no PR made
for
>>> it (the issue was that it was
breaking a lot of panels that were using
>>> unsafe html code thanks to this macro), but I would try to create a
branch
>>> on github with the corresponding code
when I have time. To sum up
what I've
>>> done, I just used a library called
JSoup which allows to easily deal
with
>>> whitelists (see
http://jsoup.org/apidocs/org/jsoup/safety/Whitelist.html for
>>> example). And as I wanted to let
users with Programming Rights use
the HTML
>>> macro without restriction, I had to
put my "secure" html macro in
>>> xwiki-platform instead of xwiki-rendering, so that my whitelist check
is
>>> not used against these users.
>>> BTW let me know if there any issue you get with my other XSS PR and
don't
>>> hesitate to contact me if you have
questions or suggestions about
what I've
>>> done there (or for other security
matters !). As Vincent said, I'm in
>>> holidays right now, so I could be slow to answer, but I won't forget
you ;).
>>>
>>> Thanks !
>>>
>>> Thomas
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
25 Sep
25 Sep
9:20 a.m.
New subject: [xwiki-devs] Regarding modifying the elments while creating a new entry
On Wed, Sep 25, 2013 at 12:29 AM, Prachi Maheshwari
<prachi.maheshwari(a)netboss.com> wrote:
Hey all,
I have created a new application(appwithinmins) from the create your own functionality of
xwiki.
Now I want to add an entry, so I do add an entry on my
application homepage. But I want to pass some default values in the form so that it
remains there and repopulate the creating the new entry form.
You can set the default values when you create/edit the application,
in the Structure step, by simply typing the default values in the
displayed input fields.
Hope this helps,
Marius
> Also is there any class or plug in that I can use to modify or change 'Add an
Entry' function on the homepage of the application created.
> How to do this? Can anyone help?
>
> Thanks.
>
>
> -----Original Message-----
> From: devs-bounces(a)xwiki.org [mailto:devs-bounces@xwiki.org] On Behalf Of
devs-request(a)xwiki.org
> Sent: Tuesday, September 24, 2013 5:05 PM
> To: devs(a)xwiki.org
> Subject: devs Digest, Vol 75, Issue 54
>
> Send devs mailing list submissions to
> devs(a)xwiki.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.xwiki.org/mailman/listinfo/devs
> or, via email, send a message with subject or body 'help' to
> devs-request(a)xwiki.org
>
> You can reach the person managing the list at
> devs-owner(a)xwiki.org
>
> When replying, please edit your Subject line so it is more specific than "Re:
Contents of devs digest..."
>
>
> Today's Topics:
>
> 1. Regarding editing the redirecting page (Prachi Maheshwari)
> 2. Re: While creating an new entry on a new application/ Editing
> the application (prachi maheshwari)
> 3. Re: Reading Get/Post variables from url (prachi maheshwari)
> 4. Re: Regarding editing the redirecting page
> (Clemens Klein-Robbenhaar)
> 5. Regarding redirecting using Url variables (Prachi Maheshwari)
> 6. Re: Security concerns (Thomas Delafosse)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 24 Sep 2013 16:04:10 +0000
> From: Prachi Maheshwari <prachi.maheshwari(a)netboss.com>
> To: "devs(a)xwiki.org" <devs(a)xwiki.org>
> Subject: [xwiki-devs] Regarding editing the redirecting page
> Message-ID:
>
<1baead0e63224f38ae46fcdd5ec57e37(a)BL2PR05MB196.namprd05.prod.outlook.com>
>
> Content-Type: text/plain; charset="us-ascii"
>
> Hey everyone,
> I have created a redirecting page in my Xwiki space(say A) which redirects every
request that comes to it to other page(say B). Now I want to modify some things in the
Page A, but cannot since its redirected to B every time. I have tried
http:/<server>/Device/Default+Device?language=en and also
http:/<server>/Device/Default+Device?editor=WYSIWYG;
> but nothing is helping, with everything I goto page B. I want to edit page A so
please temme some other way.
>
>
> ------------------------------
>
> Message: 2
> Date: Tue, 24 Sep 2013 09:11:41 -0700 (PDT)
> From: prachi maheshwari <prachi.maheshwari(a)netboss.com>
> To: devs(a)xwiki.org
> Subject: Re: [xwiki-devs] While creating an new entry on a new
> application/ Editing the application
> Message-ID:
>
<5051ce6db66f4d698e9eac7c5ef1630e(a)BL2PR05MB196.namprd05.prod.outlook.com>
>
> Content-Type: text/plain; charset=us-ascii
>
> Hey Marius,
> I have tried working with two Long text field palates and I have removed one content
box. But now when I create an entry it doesn't show me any of the two long text
boxes.
> Do I have to change some where else also?? To get them displayed on my creating the
entry page??
> thanks
>
>
> From: Marius Dumitru Florea [via XWiki]
[mailto:ml-node+s475771n7587235h16@n2.nabble.com]
> Sent: Tuesday, September 24, 2013 5:16 AM
> To: Prachi Maheshwari
> Subject: Re: While creating an new entry on a new application/ Editing the
application
>
> I'm guessing that you are trying to add two 'Content' fields. Only one is
allowed. See http://jira.xwiki.org/browse/XWIKI-8585 . You should use the 'Long
Text' field instead. See
http://extensions.xwiki.org/xwiki/bin/view/Extension/App+Within+Minutes+App…
> . If you already tried this then make sure the application was properly saved.
>
> Hope this helps,
> Marius
>
> On Mon, Sep 23, 2013 at 9:49 PM, prachi maheshwari <[hidden
email]</user/SendEmail.jtp?type=node&node=7587235&i=0>> wrote:
>
>> I want two long descriptions on my creating an entry page for
>> different kind of information. But even if I select two Description
>> Field Palates while customizing the application there is only one
>> which comes while creating a new Entry in that application. Can
>> someone please suggest me the other way of doing it.
>>
>>
>>
>> --
>> View this message in context:
>> http://xwiki.475771.n2.nabble.com/While-creating-an-new-entry-on-a-new
>> -application-Editing-the-application-tp7587225.html
>> Sent from the XWiki- Dev mailing list archive at Nabble.com.
>> _______________________________________________
>> devs mailing list
>> [hidden email]</user/SendEmail.jtp?type=node&node=7587235&i=1>
>> http://lists.xwiki.org/mailman/listinfo/devs
> _______________________________________________
> devs mailing list
> [hidden email]</user/SendEmail.jtp?type=node&node=7587235&i=2>
> http://lists.xwiki.org/mailman/listinfo/devs
>
> ________________________________
> If you reply to this email, your message will be added to the discussion below:
>
http://xwiki.475771.n2.nabble.com/While-creating-an-new-entry-on-a-new-appl…
> To unsubscribe from While creating an new entry on a new application/ Editing the
application, click
here<http://xwiki.475771.n2.nabble.com/template/NamlServlet.jtp?macro=un…gyNjU3Nw==>.
>
NAML<http://xwiki.475771.n2.nabble.com/template/NamlServlet.jtp?macro=ma…
>
>
>
>
> --
> View this message in context:
http://xwiki.475771.n2.nabble.com/While-creating-an-new-entry-on-a-new-appl…
> Sent from the XWiki- Dev mailing list archive at Nabble.com.
>
> ------------------------------
>
> Message: 3
> Date: Tue, 24 Sep 2013 09:12:32 -0700 (PDT)
> From: prachi maheshwari <prachi.maheshwari(a)netboss.com>
> To: devs(a)xwiki.org
> Subject: Re: [xwiki-devs] Reading Get/Post variables from url
> Message-ID:
>
<46387884658642d8b3926fd614376d18(a)BL2PR05MB196.namprd05.prod.outlook.com>
>
> Content-Type: text/plain; charset=UTF-8
>
> Thank you everyone.
> $request.get(?param?); works
> Thanks
>
>
> From: Denis Gervalle-2 [via XWiki] [mailto:ml-node+s475771n7587236h47@n2.nabble.com]
> Sent: Tuesday, September 24, 2013 5:47 AM
> To: Prachi Maheshwari
> Subject: Re: Reading Get/Post variables from url
>
> On Tue, Sep 24, 2013 at 10:02 AM, Valdis V?toli?? <[hidden
email]</user/SendEmail.jtp?type=node&node=7587236&i=0>>wrote:
>
>> In short:
>> $request.getParameter('param')
>>
>
> In shorter: :)
> $request.param
>
> PS: Your question is appropriate for the user list, the devs list is about the
development of XWiki itself. See
http://dev.xwiki.org/xwiki/bin/view/Community/MailingLists. Thanks.
>
>>
>> Valdis
>> > Hi,
>> >
>> > You have access to the request from velocity and groovy, check for
>> $request
>> > in scripting reference [1].
>> >
>> > [1] http://platform.xwiki.org/xwiki/bin/view/SRD/Navigation
>> >
>> > Br,
>> > Jeremie
>> > Le 23 sept. 2013 20:52, "prachi maheshwari" <
>> [hidden email]</user/SendEmail.jtp?type=node&node=7587236&i=1>>
>> > a ?crit :
>> >
>> > > Hey everyone,
>> > > I wanna read and access the variables passed in url in Velocity on
>> > > different Xwiki Pages. Please suggest me a method. I have tried
>> > > something in
>> groovy
>> > > and velocity but I want to use only one macro/language for it.
>> > > Thanks
>> > >
>> > >
>> > >
>> > > --
>> > > View this message in context:
>> > >
>> http://xwiki.475771.n2.nabble.com/Reading-Get-Post-variables-from-url-
>> tp7587226.html
>> > > Sent from the XWiki- Dev mailing list archive at Nabble.com.
>> > > _______________________________________________
>> > > devs mailing list
>> > > [hidden
email]</user/SendEmail.jtp?type=node&node=7587236&i=2>
>> > > http://lists.xwiki.org/mailman/listinfo/devs
>> > >
>> > _______________________________________________
>> > devs mailing list
>> > [hidden
email]</user/SendEmail.jtp?type=node&node=7587236&i=3>
>> > http://lists.xwiki.org/mailman/listinfo/devs
>>
>>
>> _______________________________________________
>> devs mailing list
>> [hidden email]</user/SendEmail.jtp?type=node&node=7587236&i=4>
>> http://lists.xwiki.org/mailman/listinfo/devs
>>
>
>
>
> --
> Denis Gervalle
> SOFTEC sa - CEO
> eGuilde sarl - CTO
> _______________________________________________
> devs mailing list
> [hidden email]</user/SendEmail.jtp?type=node&node=7587236&i=5>
> http://lists.xwiki.org/mailman/listinfo/devs
>
> ________________________________
> If you reply to this email, your message will be added to the discussion below:
>
http://xwiki.475771.n2.nabble.com/Reading-Get-Post-variables-from-url-tp758…
> To unsubscribe from Reading Get/Post variables from url, click
here<http://xwiki.475771.n2.nabble.com/template/NamlServlet.jtp?macro=un…gyNjU3Nw==>.
>
NAML<http://xwiki.475771.n2.nabble.com/template/NamlServlet.jtp?macro=ma…
>
>
>
>
> --
> View this message in context:
http://xwiki.475771.n2.nabble.com/Reading-Get-Post-variables-from-url-tp758…
> Sent from the XWiki- Dev mailing list archive at Nabble.com.
>
> ------------------------------
>
> Message: 4
> Date: Tue, 24 Sep 2013 18:37:15 +0200
> From: Clemens Klein-Robbenhaar <c.robbenhaar(a)espresto.com>
> To: devs(a)xwiki.org
> Subject: Re: [xwiki-devs] Regarding editing the redirecting page
> Message-ID: <5241BFBB.1050406(a)espresto.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> On 09/24/2013 06:04 PM, Prachi Maheshwari wrote:
>> Hey everyone,
>> I have created a redirecting page in my Xwiki space(say A) which
>> redirects every request that comes to it to other page(say B). Now I
>> want to modify some things in the Page A, but cannot since its
>> redirected to B every time. I have tried
>> http:/<server>/Device/Default+Device?language=en and also
>> http:/<server>/Device/Default+Device?editor=WYSIWYG;
>> but nothing is helping, with everything I goto page B. I want to edit
>> page A so please temme some other way.
>>
>
> How did you create the redirect?
> You need to tell XWiki you want to have the edit view, so maybe something like
http:/<server>/edit/Device/Default+Device?editor=WYSIWYG might help
>
> Clemens
>
>
> ------------------------------
>
> Message: 5
> Date: Tue, 24 Sep 2013 20:46:01 +0000
> From: Prachi Maheshwari <prachi.maheshwari(a)netboss.com>
> To: "devs(a)xwiki.org" <devs(a)xwiki.org>
> Subject: [xwiki-devs] Regarding redirecting using Url variables
> Message-ID:
>
<292aef4f1b5b4584a17e4a6874223c9a(a)BL2PR05MB196.namprd05.prod.outlook.com>
>
> Content-Type: text/plain; charset="us-ascii"
>
> Hey everyone, I am using
> $response.sendRedirect("http://<server>/abc?A=${A}&B=${B})
> For redirecting onto another page. I also need to pass some variables from the url
but this ain't working. Please help.
> Also, I am passing four to five variables and the url is getting broken and only
passes value until a limit only.
> So, is there any kind of limit for the url length for xwiki specifically??
> Also is there any other method for doing so??
>
>
> -----Original Message-----
> From: devs-bounces(a)xwiki.org [mailto:devs-bounces@xwiki.org] On Behalf Of
devs-request(a)xwiki.org
> Sent: Tuesday, September 24, 2013 8:00 AM
> To: devs(a)xwiki.org
> Subject: devs Digest, Vol 75, Issue 53
>
> Send devs mailing list submissions to
> devs(a)xwiki.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.xwiki.org/mailman/listinfo/devs
> or, via email, send a message with subject or body 'help' to
> devs-request(a)xwiki.org
>
> You can reach the person managing the list at
> devs-owner(a)xwiki.org
>
> When replying, please edit your Subject line so it is more specific than "Re:
Contents of devs digest..."
>
>
> Today's Topics:
>
> 1. Re: Reading Get/Post variables from url (Valdis V?toli??)
> 2. Re: While creating an new entry on a new application/ Editing
> the application (Marius Dumitru Florea)
> 3. Re: Reading Get/Post variables from url (Denis Gervalle)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 24 Sep 2013 11:02:10 +0300
> From: Valdis V?toli?? <valdis.vitolins(a)odo.lv>
> To: XWiki Developers <devs(a)xwiki.org>
> Subject: Re: [xwiki-devs] Reading Get/Post variables from url
> Message-ID: <1380009730.2421.0.camel@vostro>
> Content-Type: text/plain; charset="UTF-8"
>
> In short:
> $request.getParameter('param')
>
> Valdis
>> Hi,
>>
>> You have access to the request from velocity and groovy, check for
>> $request in scripting reference [1].
>>
>> [1] http://platform.xwiki.org/xwiki/bin/view/SRD/Navigation
>>
>> Br,
>> Jeremie
>> Le 23 sept. 2013 20:52, "prachi maheshwari"
>> <prachi.maheshwari(a)netboss.com> a ?crit :
>>
>> > Hey everyone,
>> > I wanna read and access the variables passed in url in Velocity on
>> > different Xwiki Pages. Please suggest me a method. I have tried
>> > something in groovy and velocity but I want to use only one
>> > macro/language for it.
>> > Thanks
>> >
>> >
>> >
>> > --
>> > View this message in context:
>> > http://xwiki.475771.n2.nabble.com/Reading-Get-Post-variables-from-ur
>> > l-tp7587226.html Sent from the XWiki- Dev mailing list archive at
>> > Nabble.com.
>> > _______________________________________________
>> > devs mailing list
>> > devs(a)xwiki.org
>> > http://lists.xwiki.org/mailman/listinfo/devs
>> >
>> _______________________________________________
>> devs mailing list
>> devs(a)xwiki.org
>> http://lists.xwiki.org/mailman/listinfo/devs
>
>
>
>
> ------------------------------
>
> Message: 2
> Date: Tue, 24 Sep 2013 12:15:29 +0300
> From: Marius Dumitru Florea <mariusdumitru.florea(a)xwiki.com>
> To: XWiki Developers <devs(a)xwiki.org>
> Subject: Re: [xwiki-devs] While creating an new entry on a new
> application/ Editing the application
> Message-ID:
> <CALZcbBariN8a-tX+7LKaUt8utFOJWZKf6CNhwr2t-PUDp_FVLg(a)mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> I'm guessing that you are trying to add two 'Content' fields. Only one is
allowed. See http://jira.xwiki.org/browse/XWIKI-8585 . You should use the 'Long
Text' field instead. See
http://extensions.xwiki.org/xwiki/bin/view/Extension/App+Within+Minutes+App…
> . If you already tried this then make sure the application was properly saved.
>
> Hope this helps,
> Marius
>
> On Mon, Sep 23, 2013 at 9:49 PM, prachi maheshwari
<prachi.maheshwari(a)netboss.com> wrote:
>> I want two long descriptions on my creating an entry page for
>> different kind of information. But even if I select two Description
>> Field Palates while customizing the application there is only one
>> which comes while creating a new Entry in that application. Can
>> someone please suggest me the other way of doing it.
>>
>>
>>
>> --
>> View this message in context:
>> http://xwiki.475771.n2.nabble.com/While-creating-an-new-entry-on-a-new
>> -application-Editing-the-application-tp7587225.html
>> Sent from the XWiki- Dev mailing list archive at Nabble.com.
>> _______________________________________________
>> devs mailing list
>> devs(a)xwiki.org
>> http://lists.xwiki.org/mailman/listinfo/devs
>
>
> ------------------------------
>
> Message: 3
> Date: Tue, 24 Sep 2013 11:46:13 +0200
> From: Denis Gervalle <dgl(a)softec.lu>
> To: valdis.vitolins(a)odo.lv, XWiki Developers <devs(a)xwiki.org>
> Subject: Re: [xwiki-devs] Reading Get/Post variables from url
> Message-ID:
> <CADb+PMpE6oaj=cJ4EQvE5_9X+4NvtHFSQ_kZV1v=WMC9v5GcNQ(a)mail.gmail.com>
> Content-Type: text/plain; charset=UTF-8
>
> On Tue, Sep 24, 2013 at 10:02 AM, Valdis V?toli??
<valdis.vitolins(a)odo.lv>wrote;wrote:
>
>> In short:
>> $request.getParameter('param')
>>
>
> In shorter: :)
> $request.param
>
> PS: Your question is appropriate for the user list, the devs list is about the
development of XWiki itself. See
http://dev.xwiki.org/xwiki/bin/view/Community/MailingLists. Thanks.
>
>
>>
>> Valdis
>> > Hi,
>> >
>> > You have access to the request from velocity and groovy, check for
>> $request
>> > in scripting reference [1].
>> >
>> > [1] http://platform.xwiki.org/xwiki/bin/view/SRD/Navigation
>> >
>> > Br,
>> > Jeremie
>> > Le 23 sept. 2013 20:52, "prachi maheshwari" <
>> prachi.maheshwari(a)netboss.com>
>> > a ?crit :
>> >
>> > > Hey everyone,
>> > > I wanna read and access the variables passed in url in Velocity on
>> > > different Xwiki Pages. Please suggest me a method. I have tried
>> > > something in
>> groovy
>> > > and velocity but I want to use only one macro/language for it.
>> > > Thanks
>> > >
>> > >
>> > >
>> > > --
>> > > View this message in context:
>> > >
>> http://xwiki.475771.n2.nabble.com/Reading-Get-Post-variables-from-url-
>> tp7587226.html
>> > > Sent from the XWiki- Dev mailing list archive at Nabble.com.
>> > > _______________________________________________
>> > > devs mailing list
>> > > devs(a)xwiki.org
>> > > http://lists.xwiki.org/mailman/listinfo/devs
>> > >
>> > _______________________________________________
>> > devs mailing list
>> > devs(a)xwiki.org
>> > http://lists.xwiki.org/mailman/listinfo/devs
>>
>>
>> _______________________________________________
>> devs mailing list
>> devs(a)xwiki.org
>> http://lists.xwiki.org/mailman/listinfo/devs
>>
>
>
>
> --
> Denis Gervalle
> SOFTEC sa - CEO
> eGuilde sarl - CTO
>
>
> ------------------------------
>
> _______________________________________________
> devs mailing list
> devs(a)xwiki.org
> http://lists.xwiki.org/mailman/listinfo/devs
>
>
> End of devs Digest, Vol 75, Issue 53
> ************************************
>
>
> ------------------------------
>
> Message: 6
> Date: Tue, 24 Sep 2013 23:04:56 +0200
> From: Thomas Delafosse <thomas.delafosse(a)xwiki.com>
> To: XWiki Developers <devs(a)xwiki.org>
> Subject: Re: [xwiki-devs] Security concerns
> Message-ID:
> <CAHXP8+cXffA=N=HMvEc6z_co+qPyT8pP44D6sMUgMTpMv_g-nA(a)mail.gmail.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Hello Christian,
>
> Sorry to have been so long before answering ! Here's at least a
> little patch that you can easily apply to make HTML macro secure. Note that
> a lot of HTML macros that are in wikis default pages won't work anymore !
> Note also that you need the JSOUP package (http://jsoup.org/download) in
> your wiki libs to make it work, as this is the library I used for the
> verification of the html macro content. For more liberty, you can instead
> try to make a custom verification such as the one I made for the wiki
> syntax, it's up to you :). To finish, note also that you should skip the
> tests when building the new xwiki-rendering-macro-html package, as I didn't
> adapt them (these test contains quite a lot of tags and attributes that
> should be forbidden for security reasons).
> As I probably said earlier, a cleaner way to do that is to put the html
> macro in the platform code, and to add a check for programming rights. I
> got something like that somewhere, but I should rework it a bit when I got
> some time to do it. But at least this patch should let see how this is
> supposed to work !
> Of course if you have any questions, feel free to ask them, and I would try
> to reply a bit faster this time ;)
>
> Hope this helps !
>
> Thomas
>
>
> On Tue, Sep 17, 2013 at 11:34 AM, Vincent Massol <vincent(a)massol.net> wrote:
>
>>
>> On Sep 17, 2013, at 10:26 AM, Christian Meunier <
>> christian.meunier(a)magelo.com> wrote:
>>
>> > Thanks Vincent for the heads up !
>> >
>> > Any chance Marius or some other dev can have a look the XSS in wiki
>> Syntax PR ?
>> > > https://github.com/xwiki/xwiki-rendering/pull/6#discussion_r5632662
>> >
>> > I have tested it, beside the bug I have spotted, it worked just fine for
>> me.
>> >
>> > Would be nice to include this one in 5.2 because right now, it just too
>> trivial to do XSS injection with the wiki syntax..
>>
>> It seems too large a patch to make it in 5.2 now (we're reaching RC1) but
>> it could go in 5.3M1.
>>
>> Thanks
>> -Vincent
>>
>> > Thanks !
>> >
>> > --
>> > Chris
>> >
>> > On 9/17/2013 14:43, Vincent Massol wrote:
>> >> Hi Christian,
>> >>
>> >> On Sep 17, 2013, at 8:16 AM, Christian Meunier <
>> christian.meunier(a)magelo.com> wrote:
>> >>
>> >>> Hi Thomas,
>> >>>
>> >>> Hope you had good holidays !
>> >>>
>> >>> I was wondering if you could give me an update on the work you
started
>> for the html macro ?
>> >>> Btw, have you noticed my comment on
>> https://github.com/xwiki/xwiki-rendering/pull/6#discussion_r5632662 ?
>> >>>
>> >>> Also, question for the devs, I see that the 5.2 is near the corner
and
>> yet many of Thomas's security PRs are still pending..
>> >> Several have been applied (by Marius).
>> >>
>> >>> Shouldnt those security PRs be a priority ? Is there a
roadmap/target
>> for those ?
>> >> FYI ThomasD was working lately on signed scripts which will fix a lot
>> of current potential security issues. This is a big piece of work. I said
>> "was" because Thomas is now going abroad in the context of his school
>> studies and will probably be less available. The good news is that Denis
>> Gervalle has agreed to carry on his work and more generally to focus on
>> security issues for the coming 3 months at least.
>> >>
>> >> So you should see progress in this area :)
>> >>
>> >> Thanks
>> >> -Vincent
>> >>
>> >>> Thanks !
>> >>>
>> >>> --
>> >>> Chris
>> >>>
>> >>> On 8/10/2013 05:10, Thomas Delafosse wrote:
>> >>>> Hello Christian,
>> >>>>
>> >>>> It's nice to see that you are interested in XWiki
security :)
>> >>>> As for the secure html macro I've been working on,
there's no PR made
>> for
>> >>>> it (the issue was that it was breaking a lot of panels that were
using
>> >>>> unsafe html code thanks to this macro), but I would try to
create a
>> branch
>> >>>> on github with the corresponding code when I have time. To sum
up
>> what I've
>> >>>> done, I just used a library called JSoup which allows to easily
deal
>> with
>> >>>> whitelists (see
>> http://jsoup.org/apidocs/org/jsoup/safety/Whitelist.html for
>> >>>> example). And as I wanted to let users with Programming Rights
use
>> the HTML
>> >>>> macro without restriction, I had to put my "secure"
html macro in
>> >>>> xwiki-platform instead of xwiki-rendering, so that my whitelist
check
>> is
>> >>>> not used against these users.
>> >>>> BTW let me know if there any issue you get with my other XSS PR
and
>> don't
>> >>>> hesitate to contact me if you have questions or suggestions
about
>> what I've
>> >>>> done there (or for other security matters !). As Vincent said,
I'm in
>> >>>> holidays right now, so I could be slow to answer, but I
won't forget
>> you ;).
>> >>>>
>> >>>> Thanks !
>> >>>>
>> >>>> Thomas
>> _______________________________________________
>> devs mailing list
>> devs(a)xwiki.org
>> http://lists.xwiki.org/mailman/listinfo/devs
>>
>
4009
days inactive
4010
days old
1 comments
2 participants
participants (2)
-
Marius Dumitru Florea -
Prachi Maheshwari