10 Jan
2014
10 Jan
'14
11:42 a.m.
Hello people,
When I use the "bar" ="/" character in my page names occurs a bug. The
page is created but when I access the link complete blank page appears to me! Even I try
to delete or rename the page the blank page continues showing to me... How can I delete
these pages? Is there some way to avoid the users to create pages with bar
("/") character?
Thank you.
Grupo Energisa
Danilo A. Oliveira
Analista Suporte Aplicacao TI - DETI
e-mail: danilo.oliveira(a)energisa.com.br | tel: (32) 3429-6342
Esta mensagem contém informação confidencial. Se você a recebeu por engano, não divulgue
ou copie seu conteúdo. Por favor, avise ao remetente imediatamente e apague-a do
computador.
Privileged and confidential. If this message has been received by mistake, do not disclose
or copy its contents. Please notify sender and delete immediately.
10 Jan
10 Jan
12:29 p.m.
New subject: [xwiki-users] Bug using bar "/" in the page name
Hi Danilo,
Hello people,
When I use the "bar" ="/" character in my page names occurs a bug.
The page is created but when I access the link complete blank page appears to me! Even I
try to delete or rename the page the blank page continues showing to me... How can I
delete these pages? Is there some way to avoid the users to create pages with bar
("/") character?
Thank you.
Any chance you are using tomcat as web container?
Then most probably this is this issue: http://jira.xwiki.org/browse/XE-688 which is
basically a problem with tomcat being too paranoid about something.
I can get a similar result when using mod_proxy from the apache-httpd however ;)
If you want to get rid of that defunct page, paste the following snippet into any page and
view the page:
{{velocity}}
$xwiki.getDocument("Space.My Pahe with /Slash").delete()
{{/velocity}}
Hope this helps,
Clemens
5:30 p.m.
New subject: [xwiki-users] RES: Bug using bar "/" in the page name
Exactly Clemens!
I am using tomcat 7.
Thank you for the advice in how to exclude the page, I will use it!
However, is there any way to block the usage of the slash by the users?
Thank you
Danilo
Grupo Energisa
Danilo A. Oliveira
Analista Suporte Aplicacao TI - DETI
e-mail: danilo.oliveira(a)energisa.com.br | tel: (32) 3429-6342
Esta mensagem contém informação confidencial. Se você a recebeu por engano, não divulgue
ou copie seu conteúdo. Por favor, avise ao remetente imediatamente e apague-a do
computador.
Privileged and confidential. If this message has been received by mistake, do not disclose
or copy its contents. Please notify sender and delete immediately.
-----Mensagem original-----
De: users [mailto:users-bounces@xwiki.org] Em nome de Clemens Klein-Robbenhaar
Enviada em: sexta-feira, 10 de janeiro de 2014 09:30
Para: users(a)xwiki.org
Assunto: Re: [xwiki-users] Bug using bar "/" in the page name
Hi Danilo,
Hello people,
When I use the "bar" ="/" character in my page names occurs a bug.
The page is created but when I access the link complete blank page appears to me! Even I
try to delete or rename the page the blank page continues showing to me... How can I
delete these pages? Is there some way to avoid the users to create pages with bar
("/") character?
Thank you.
Any chance you are using tomcat as web container?
Then most probably this is this issue: http://jira.xwiki.org/browse/XE-688 which is
basically a problem with tomcat being too paranoid about something.
I can get a similar result when using mod_proxy from the apache-httpd however ;)
If you want to get rid of that defunct page, paste the following snippet into any page and
view the page:
{{velocity}}
$xwiki.getDocument("Space.My Pahe with /Slash").delete() {{/velocity}}
Hope this helps,
Clemens
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
6:26 p.m.
New subject: [xwiki-users] RES: Bug using bar "/" in the page name
I am using tomcat 7.
Thank you for the advice in how to exclude the page, I will use it!
However, is there any way to block the usage of the slash by the users?
Not yet. As far as I understand the recommended fix is to reconfigure tomcat so it does
not forbid the encoded version of the slash as explained here:
http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.10
i.e. adding -Dorg.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true to the
CATALINA_OPTS
The same note points out that without settign the other property there you can shoot
yourself in the foot with a backslash '\' as well, and I can fully confirm this
:)
As not every user might be willing to configure tomcat in a way that is considered
"disabling a security setting", I wonder if it would be acceptable to add a
configuration setting that contains a list of "illegal characters" for page
names, which then can be set to '\' and '/' if XWiki is running inside a
tomcat with its default configuration.
(Actually implementing this might be a bit tricky, as there are other ways to create a
page with a '/' in the name, e.g. rename, copy and XAR-import, just to mention the
few I can imagine on the spot ...)
Clemens
3955
days inactive
3955
days old
3 comments
2 participants
participants (2)
-
Clemens Klein-Robbenhaar -
Danilo Amaral de Oliveira