[xwiki-users] Bug using bar "/" in the page name
Hello people, When I use the "bar" ="/" character in my page names occurs a bug. The page is created but when I access the link complete blank page appears to me! Even I try to delete or rename the page the blank page continues showing to me... How can I delete these pages? Is there some way to avoid the users to create pages with bar ("/") character? Thank you. Grupo Energisa Danilo A. Oliveira Analista Suporte Aplicacao TI - DETI e-mail: [email protected] | tel: (32) 3429-6342 Esta mensagem contém informação confidencial. Se você a recebeu por engano, não divulgue ou copie seu conteúdo. Por favor, avise ao remetente imediatamente e apague-a do computador. Privileged and confidential. If this message has been received by mistake, do not disclose or copy its contents. Please notify sender and delete immediately.
Hi Danilo,
Hello people,
When I use the "bar" ="/" character in my page names occurs a bug. The page is created but when I access the link complete blank page appears to me! Even I try to delete or rename the page the blank page continues showing to me... How can I delete these pages? Is there some way to avoid the users to create pages with bar ("/") character?
Thank you.
Any chance you are using tomcat as web container? Then most probably this is this issue: http://jira.xwiki.org/browse/XE-688 which is basically a problem with tomcat being too paranoid about something. I can get a similar result when using mod_proxy from the apache-httpd however ;) If you want to get rid of that defunct page, paste the following snippet into any page and view the page: {{velocity}} $xwiki.getDocument("Space.My Pahe with /Slash").delete() {{/velocity}} Hope this helps, Clemens
Exactly Clemens! I am using tomcat 7. Thank you for the advice in how to exclude the page, I will use it! However, is there any way to block the usage of the slash by the users? Thank you Danilo Grupo Energisa Danilo A. Oliveira Analista Suporte Aplicacao TI - DETI e-mail: [email protected] | tel: (32) 3429-6342 Esta mensagem contém informação confidencial. Se você a recebeu por engano, não divulgue ou copie seu conteúdo. Por favor, avise ao remetente imediatamente e apague-a do computador. Privileged and confidential. If this message has been received by mistake, do not disclose or copy its contents. Please notify sender and delete immediately. -----Mensagem original----- De: users [mailto:[email protected]] Em nome de Clemens Klein-Robbenhaar Enviada em: sexta-feira, 10 de janeiro de 2014 09:30 Para: [email protected] Assunto: Re: [xwiki-users] Bug using bar "/" in the page name Hi Danilo,
Hello people,
When I use the "bar" ="/" character in my page names occurs a bug. The page is created but when I access the link complete blank page appears to me! Even I try to delete or rename the page the blank page continues showing to me... How can I delete these pages? Is there some way to avoid the users to create pages with bar ("/") character?
Thank you.
Any chance you are using tomcat as web container? Then most probably this is this issue: http://jira.xwiki.org/browse/XE-688 which is basically a problem with tomcat being too paranoid about something. I can get a similar result when using mod_proxy from the apache-httpd however ;) If you want to get rid of that defunct page, paste the following snippet into any page and view the page: {{velocity}} $xwiki.getDocument("Space.My Pahe with /Slash").delete() {{/velocity}} Hope this helps, Clemens _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
I am using tomcat 7. Thank you for the advice in how to exclude the page, I will use it! However, is there any way to block the usage of the slash by the users?
Not yet. As far as I understand the recommended fix is to reconfigure tomcat so it does not forbid the encoded version of the slash as explained here: http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.10 i.e. adding -Dorg.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true to the CATALINA_OPTS The same note points out that without settign the other property there you can shoot yourself in the foot with a backslash '\' as well, and I can fully confirm this :) As not every user might be willing to configure tomcat in a way that is considered "disabling a security setting", I wonder if it would be acceptable to add a configuration setting that contains a list of "illegal characters" for page names, which then can be set to '\' and '/' if XWiki is running inside a tomcat with its default configuration. (Actually implementing this might be a bit tricky, as there are other ways to create a page with a '/' in the name, e.g. rename, copy and XAR-import, just to mention the few I can imagine on the spot ...) Clemens
participants (2)
-
Clemens Klein-Robbenhaar -
Danilo Amaral de Oliveira