[xwiki-devs] Why /templates not in /WEB-INF?

Lilianne E. Blaze lilianne at lilianne-blaze.net
Thu Jun 12 10:45:52 CEST 2008


Tiago Rinck Caveden wrote:
> On Thu, Jun 12, 2008 at 9:53 AM, Lilianne E. Blaze <
> lilianne at lilianne-blaze.net> wrote:
> 
>> Hello,
>>
>> Pascal Voitot wrote:
>>> scripts could be copied/pasted in any XWiki document... To my mind, the
>>> important thing is not to hide these scripts but to verify they don't
>> I agree it's more important, but it's better to take a multi-layered
>> approach and both secure and hide the code. No point in showing (or
>> not-hiding) anything you don't need to show, no matter how trivial.
> 
> 
> 
> XWiki is free software... The entire source is readable by the whole
> world... and this is good!
> 
> I think the opposite way actually. No point in hiding if there is no
> important secret there. Spread the knowledge.

I partially agree. But it is LGPL, meaning it is possible to use it with 
closed-code software. Some of the glue code will likely end up in 
/templates, and not everyone will be comfortable with having said 
glue-code viewable by public.

No matter, I think I have a pretty simple solution that doesn't require 
any changes in XWiki source. I'll let you know when I'll have it ready. 
Probably in 3-4 days tops.

> 
> Best regards,

Greetings, Lilianne




More information about the devs mailing list