[xwiki-notifications] [Issue] Commented: (XWIKI-1850) No security aginst recursive includes

Sergiu Dumitriu (JIRA) jira at xwiki.org
Sat Mar 1 04:23:19 CET 2008


    [ http://jira.xwiki.org/jira/browse/XWIKI-1850?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_23530 ] 

Sergiu Dumitriu commented on XWIKI-1850:
----------------------------------------

This only happens with includeMacros, which forces a pre-inclusion in the velocity renderer.

It does not go into an infinite loop, but almost (2^32 recursive calls).

> No security aginst recursive includes
> -------------------------------------
>
>                 Key: XWIKI-1850
>                 URL: http://jira.xwiki.org/jira/browse/XWIKI-1850
>             Project: XWiki Core
>          Issue Type: Bug
>    Affects Versions: 1.1.1
>            Reporter: Raffaello Pelagalli
>
> It seems that there is no security against recursive includes.
> For e.g :
> on a page Main.MyTest, writting #includeMacros("Main.MyTest") would make XWiki going in an infinite loop

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.xwiki.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


More information about the notifications mailing list