4 Aug
2010
4 Aug
'10
3:27 a.m.
This is a bit of a late reply, but I've implemented this and am
wondering what you would recommend doing about security with this
approach.
On Thu, Jul 15, 2010 at 5:10 PM, Sergiu Dumitriu <sergiu(a)xwiki.com> wrote:
On 07/15/2010 04:55 PM, Carlos Correa wrote:
One of the users of the xwiki server (*nix) that
I'm helping with has
an interesting feature request. He wants a wiki page with a listing of
Microsoft Office files that are in a unix directory. He wants to be
able to click on one of the file names and have it download.
I don't know enough about xwiki to know how to cause a download to
occur on the user's side. The only solution I can think of is
attaching the files to the page and scripting regular updating (which
is very clunky). Is there a more elegant way to cause downloads to
occur on the user's end without adding the file as an attachment?
Well, XWiki is a java application, so the easiest thing to do is to
write a Java component that does this. Assuming you have a recent
version of XWiki, you should:
- write a scriptable service which can list the files on the filesystem;
should be a ScriptService component if you're targeting XWiki 2.3 or
later, or a VelocityContextInitializer for earlier; see
http://code.xwiki.org/xwiki/bin/view/Modules/ComponentModule for general
documentation about components
- write a servlet or a struts action which can be used to retrieve the
contents of the file; make sure you're not creating a security hole,
check the absolute path requested by the user; a good example would be
http://svn.xwiki.org/svnroot/xwiki/platform/core/trunk/xwiki-core/src/main/…
- register the above servlet/struts action in web.xml, respectively
struts-config.xml
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users