12 Jun
2010
12 Jun
'10
3:26 p.m.
Hello!
Yet another problem I'm encountering is lack of
proper escaping tools. I have noticed it when I
decided to use [ and ] in page titles.
«My Recent Modifications» became broken because
XWiki parsed [ and ]. Currently I have added
{pre} and {/pre} at both ends, but it is just a
krunch. What is the proper way? I have checked
$escapetool and $xwiki.get*Encoded APIs. There is
no common API to escape [, ], =, {, etc.
12 Jun
12 Jun
6:01 p.m.
The bug itself is reported on JIRA:
http://jira.xwiki.org/jira/browse/XAPANELS-126
--
If you want to get to the top, you have to start at the bottom
13 Jun
13 Jun
10:43 a.m.
On 06/12/2010 04:26 PM, Ivan Levashew wrote:
Hello!
Yet another problem I'm encountering is lack of
proper escaping tools. I have noticed it when I
decided to use [ and ] in page titles.
«My Recent Modifications» became broken because
XWiki parsed [ and ]. Currently I have added
{pre} and {/pre} at both ends, but it is just a
krunch. What is the proper way? I have checked
$escapetool and $xwiki.get*Encoded APIs. There is
no common API to escape [, ], =, {, etc.
You haven't checked
http://platform.xwiki.org/xwiki/bin/view/Main/XWikiSyntax#HEscapes ;)
Hope this helps,
Marius
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
11:20 a.m.
On 06/13/2010 11:43 AM, Marius Dumitru Florea wrote:
On 06/12/2010 04:26 PM, Ivan Levashew wrote:
Hello!
Yet another problem I'm encountering is lack of
proper escaping tools. I have noticed it when I
decided to use [ and ] in page titles.
«My Recent Modifications» became broken because
XWiki parsed [ and ]. Currently I have added
{pre} and {/pre} at both ends, but it is just a
krunch. What is the proper way? I have checked
$escapetool and $xwiki.get*Encoded APIs. There is
no common API to escape [, ], =, {, etc.
You haven't checked
http://platform.xwiki.org/xwiki/bin/view/Main/XWikiSyntax#HEscapes ;)
This doesn't fix your problem. What about
http://platform.xwiki.org/xwiki/bin/download/DevGuide/API/xwiki-core-2.3.1-…
?
Hope this helps,
Marius
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users 
11:51 a.m.
New subject: [xwiki-users] [Proposal] How about extending EscapeTool to add XWiki 1.0 and 2.0 escaping? Re: XWiki/1.0 and XWiki/2.0 escaping
Right now $escapetool is included via velocity configuration.
I don't see any reason why we couldn't change to a VelocityContextInitializer
which adds an extension of escapetool which has:
$escapetool.xwiki1(String)
$escapetool.xwiki2(String)
Although it would be cleaner I'm resistant to:
$escapetool.xwiki.syntax20(String)
or the like because vulnerability is easier than security so we should
make security as easy (to type) as possible.
I'm not sure when I'll have time to do this but I don't think it'd take
more
than a few hours.
WDYT?
Caleb
Marius Dumitru Florea wrote:
On 06/13/2010 11:43 AM, Marius Dumitru Florea wrote:
On 06/12/2010 04:26 PM, Ivan Levashew wrote:
> Hello!
>
> Yet another problem I'm encountering is lack of
> proper escaping tools. I have noticed it when I
> decided to use [ and ] in page titles.
> «My Recent Modifications» became broken because
> XWiki parsed [ and ]. Currently I have added
> {pre} and {/pre} at both ends, but it is just a
> krunch. What is the proper way? I have checked
> $escapetool and $xwiki.get*Encoded APIs. There is
> no common API to escape [, ], =, {, etc.
You haven't checked
http://platform.xwiki.org/xwiki/bin/view/Main/XWikiSyntax#HEscapes ;)
This doesn't fix your problem. What about
http://platform.xwiki.org/xwiki/bin/download/DevGuide/API/xwiki-core-2.3.1-…
?
Hope this helps,
Marius
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users 
11:55 a.m.
New subject: [xwiki-users] [xwiki-devs] [Proposal] How about extending EscapeTool to add XWiki 1.0 and 2.0 escaping? Re: XWiki/1.0 and XWiki/2.0 escaping
Good idea. These methods should have been there from the very beginning IMO.
Alex
On 06/13/2010 11:51 AM, Caleb James DeLisle wrote:
Right now $escapetool is included via velocity
configuration.
I don't see any reason why we couldn't change to a VelocityContextInitializer
which adds an extension of escapetool which has:
$escapetool.xwiki1(String)
$escapetool.xwiki2(String)
Although it would be cleaner I'm resistant to:
$escapetool.xwiki.syntax20(String)
or the like because vulnerability is easier than security so we should
make security as easy (to type) as possible.
I'm not sure when I'll have time to do this but I don't think it'd take
more
than a few hours.
WDYT?
Caleb
Marius Dumitru Florea wrote:
On 06/13/2010 11:43 AM, Marius Dumitru Florea
wrote:
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs On 06/12/2010 04:26 PM, Ivan Levashew wrote:
> Hello!
>
> Yet another problem I'm encountering is lack of
> proper escaping tools. I have noticed it when I
> decided to use [ and ] in page titles.
> «My Recent Modifications» became broken because
> XWiki parsed [ and ]. Currently I have added
> {pre} and {/pre} at both ends, but it is just a
> krunch. What is the proper way? I have checked
> $escapetool and $xwiki.get*Encoded APIs. There is
> no common API to escape [, ], =, {, etc.
You haven't checked
http://platform.xwiki.org/xwiki/bin/view/Main/XWikiSyntax#HEscapes ;)
This doesn't fix your problem. What about
http://platform.xwiki.org/xwiki/bin/download/DevGuide/API/xwiki-core-2.3.1-…
?
Hope this helps,
Marius
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
12:03 p.m.
Marius Dumitru Florea <mariusdumitru.florea@...> writes:
http://platform.xwiki.org/xwiki/bin/view/Main/
XWikiSyntax#HEscapes ;)
This doesn't fix your problem. What about
http://platform.xwiki.org/xwiki/bin/download/DevGuide/
API/xwiki-core-2.3.1-javadoc.jar/com/xpn/xwiki/
api/Util.html#escapeText%28java.lang.String%29 ?
>
> Hope this helps,
Yes, it was helpful. However, I can see no XWiki/2.0 escaping.
Here:
http://maven.xwiki.org/site/xwiki-core-parent/xwiki-core/apidocs/
index-all.html
... I have found XWiki/1.0 escaping and Radeox escaping, but no
XWiki/2.0 escaping.
escapeText(String) - Method in class
com.xpn.xwiki.api.Util
Protect Text from Wiki transformation.
escapeText(String) - Static method in class
com.xpn.xwiki.util.Util API to protect Text from
Radeox transformation
--
If you want to get to the top, you have to start at the bottom
14 Jun
14 Jun
10:48 a.m.
New subject: [xwiki-users] [Proposal] How about extending EscapeTool to add XWiki 1.0 and 2.0 escaping? Re: XWiki/1.0 and XWiki/2.0 escaping
On Sun, Jun 13, 2010 at 11:51, Caleb James DeLisle
<calebdelisle(a)lavabit.com> wrote:
Right now $escapetool is included via velocity
configuration.
I don't see any reason why we couldn't change to a VelocityContextInitializer
which adds an extension of escapetool which has:
$escapetool.xwiki1(String)
$escapetool.xwiki2(String)
Although it would be cleaner I'm resistant to:
$escapetool.xwiki.syntax20(String)
or the like because vulnerability is easier than security so we should
make security as easy (to type) as possible.
I'm not sure when I'll have time to do this but I don't think it'd take
more
than a few hours.
WDYT?
$escapetool.xwiki2(String) is pretty easy to do but
$escapetool.xwiki1(String) is almost impossible (which is one of the
many reason for having the new rendering system and syntax)
But here is my +1 for the general principal.
We would also have
$escapetool.syntax(String content, Syntax syntaxId)
that would support any provided syntax that implements a proper
Renderer. $escapetool.xwiki2(String) could still be a shortcut for the
same thing since as you said it should be as easy as possible to call
it.
Caleb
Marius Dumitru Florea wrote:
--
Thomas Mortagne
On 06/13/2010 11:43 AM, Marius Dumitru Florea
wrote:
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
On 06/12/2010 04:26 PM, Ivan Levashew wrote:
> Hello!
>
> Yet another problem I'm encountering is lack of
> proper escaping tools. I have noticed it when I
> decided to use [ and ] in page titles.
> «My Recent Modifications» became broken because
> XWiki parsed [ and ]. Currently I have added
> {pre} and {/pre} at both ends, but it is just a
> krunch. What is the proper way? I have checked
> $escapetool and $xwiki.get*Encoded APIs. There is
> no common API to escape [, ], =, {, etc.
You haven't checked
http://platform.xwiki.org/xwiki/bin/view/Main/XWikiSyntax#HEscapes ;)
This doesn't fix your problem. What about
http://platform.xwiki.org/xwiki/bin/download/DevGuide/API/xwiki-core-2.3.1-…
?
Hope this helps,
Marius
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
10:52 a.m.
New subject: [xwiki-users] [xwiki-devs] [Proposal] How about extending EscapeTool to add XWiki 1.0 and 2.0 escaping? Re: XWiki/1.0 and XWiki/2.0 escaping
On Sun, Jun 13, 2010 at 11:51, Caleb James DeLisle
<calebdelisle(a)lavabit.com> wrote:
Right now $escapetool is included via velocity
configuration.
I don't see any reason why we couldn't change to a VelocityContextInitializer
which adds an extension of escapetool which has:
$escapetool.xwiki1(String)
$escapetool.xwiki2(String)
Although it would be cleaner I'm resistant to:
$escapetool.xwiki.syntax20(String)
or the like because vulnerability is easier than security so we should
make security as easy (to type) as possible.
I'm not sure when I'll have time to do this but I don't think it'd take
more
than a few hours.
WDYT?
$escapetool.xwiki2(String) is pretty easy to do but
$escapetool.xwiki1(String) is almost impossible (which is one of the
many reason for having the new rendering system and syntax)
But here is my +1 for the general principal.
We would also have
$escapetool.syntax(String content, Syntax syntaxId)
that would support any provided syntax that implements a proper
Renderer. $escapetool.xwiki2(String) could still be a shortcut for the
same thing since as you said it should be as easy as possible to call
it.
Caleb
Marius Dumitru Florea wrote:
--
Thomas Mortagne
On 06/13/2010 11:43 AM, Marius Dumitru Florea
wrote:
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
On 06/12/2010 04:26 PM, Ivan Levashew wrote:
> Hello!
>
> Yet another problem I'm encountering is lack of
> proper escaping tools. I have noticed it when I
> decided to use [ and ] in page titles.
> «My Recent Modifications» became broken because
> XWiki parsed [ and ]. Currently I have added
> {pre} and {/pre} at both ends, but it is just a
> krunch. What is the proper way? I have checked
> $escapetool and $xwiki.get*Encoded APIs. There is
> no common API to escape [, ], =, {, etc.
You haven't checked
http://platform.xwiki.org/xwiki/bin/view/Main/XWikiSyntax#HEscapes ;)
This doesn't fix your problem. What about
http://platform.xwiki.org/xwiki/bin/download/DevGuide/API/xwiki-core-2.3.1-…
?
Hope this helps,
Marius
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
11:33 a.m.
New subject: [xwiki-users] [xwiki-devs] [Proposal] How about extending EscapeTool to add XWiki 1.0 and 2.0 escaping? Re: XWiki/1.0 and XWiki/2.0 escaping
Thomas Mortagne wrote:
On Sun, Jun 13, 2010 at 11:51, Caleb James DeLisle
<calebdelisle(a)lavabit.com> wrote:
I imagined it would be like: "{{{" + string.replaceAll("}}}",
"~}~}~}") + "}}}"
Right now $escapetool is included via velocity
configuration.
I don't see any reason why we couldn't change to a VelocityContextInitializer
which adds an extension of escapetool which has:
$escapetool.xwiki1(String)
$escapetool.xwiki2(String)
Although it would be cleaner I'm resistant to:
$escapetool.xwiki.syntax20(String)
or the like because vulnerability is easier than security so we should
make security as easy (to type) as possible.
I'm not sure when I'll have time to do this but I don't think it'd take
more
than a few hours.
WDYT?
$escapetool.xwiki2(String) is pretty easy to do but $escapetool.xwiki1(String) is almost impossible (which
is one of the
many reason for having the new rendering system and syntax)
Hmm, how about xml escaping any character which is used in syntax1.0 formatting?
But here is my +1 for the general principal.
We would also have
$escapetool.syntax(String content, Syntax syntaxId)
that would support any provided syntax that implements a proper
Renderer.
+1 for the idea, how do we get at the Syntax object in velocity?
Maybe: $escapetool.syntax(String content, String syntaxId) is more realistic.
$escapetool.xwiki2(String) could still be a shortcut
for the
same thing since as you said it should be as easy as possible to call
it.
My thinking exactly.
Caleb
Marius Dumitru Florea wrote:
On 06/13/2010 11:43 AM, Marius Dumitru Florea
wrote:
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
On 06/12/2010 04:26 PM, Ivan Levashew wrote:
> Hello!
>
> Yet another problem I'm encountering is lack of
> proper escaping tools. I have noticed it when I
> decided to use [ and ] in page titles.
> «My Recent Modifications» became broken because
> XWiki parsed [ and ]. Currently I have added
> {pre} and {/pre} at both ends, but it is just a
> krunch. What is the proper way? I have checked
> $escapetool and $xwiki.get*Encoded APIs. There is
> no common API to escape [, ], =, {, etc.
You haven't checked
http://platform.xwiki.org/xwiki/bin/view/Main/XWikiSyntax#HEscapes ;)
This
doesn't fix your problem. What about
http://platform.xwiki.org/xwiki/bin/download/DevGuide/API/xwiki-core-2.3.1-…
?
Hope this helps,
Marius
> _______________________________________________
> users mailing list
> users(a)xwiki.org
> http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
11:27 a.m.
New subject: [xwiki-users] [xwiki-devs] [Proposal] How about extending EscapeTool to add XWiki 1.0 and 2.0 escaping? Re: XWiki/1.0 and XWiki/2.0 escaping
On Mon, Jun 14, 2010 at 11:33, Caleb James DeLisle
<calebdelisle(a)lavabit.com> wrote:
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
--
Thomas Mortagne
Thomas Mortagne wrote:
No, nothing like that: you parse it with plain/1.0 parser and render
it with xwiki/2.0 renderer (or any other syntax providing a renderer
in which you want to escape it).
On Sun, Jun 13, 2010 at 11:51, Caleb James
DeLisle
<calebdelisle(a)lavabit.com> wrote:
I imagined it would be like: "{{{" + string.replaceAll("}}}",
"~}~}~}") + "}}}" Right now $escapetool is included via velocity
configuration.
I don't see any reason why we couldn't change to a VelocityContextInitializer
which adds an extension of escapetool which has:
$escapetool.xwiki1(String)
$escapetool.xwiki2(String)
Although it would be cleaner I'm resistant to:
$escapetool.xwiki.syntax20(String)
or the like because vulnerability is easier than security so we should
make security as easy (to type) as possible.
I'm not sure when I'll have time to do this but I don't think it'd take
more
than a few hours.
WDYT?
$escapetool.xwiki2(String) is pretty easy to do but $escapetool.xwiki1(String) is almost impossible
(which is one of the
many reason for having the new rendering system and syntax)
Hmm, how about xml escaping any character which is used in syntax1.0 formatting?
But here is my +1 for the general principal.
We would also have
$escapetool.syntax(String content, Syntax syntaxId)
that would support any provided syntax that implements a proper
Renderer.
+1 for the idea, how do we get at the Syntax object in velocity?
Maybe: $escapetool.syntax(String content, String syntaxId) is more realistic.
$escapetool.xwiki2(String) could still be a
shortcut for the
same thing since as you said it should be as easy as possible to call
it.
My thinking exactly.
Caleb
Marius Dumitru Florea wrote:
On 06/13/2010 11:43 AM, Marius Dumitru Florea
wrote:
> On 06/12/2010 04:26 PM, Ivan Levashew wrote:
>> Hello!
>>
>> Yet another problem I'm encountering is lack of
>> proper escaping tools. I have noticed it when I
>> decided to use [ and ] in page titles.
>> «My Recent Modifications» became broken because
>> XWiki parsed [ and ]. Currently I have added
>> {pre} and {/pre} at both ends, but it is just a
>> krunch. What is the proper way? I have checked
>> $escapetool and $xwiki.get*Encoded APIs. There is
>> no common API to escape [, ], =, {, etc.
> You haven't checked
> http://platform.xwiki.org/xwiki/bin/view/Main/XWikiSyntax#HEscapes ;)
This doesn't fix your problem. What about
http://platform.xwiki.org/xwiki/bin/download/DevGuide/API/xwiki-core-2.3.1-…
?
> Hope this helps,
> Marius
>
>> _______________________________________________
>> users mailing list
>> users(a)xwiki.org
>> http://lists.xwiki.org/mailman/listinfo/users
> _______________________________________________
> users mailing list
> users(a)xwiki.org
> http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
5211
days inactive
5213
days old
10 comments
5 participants
participants (5)
-
Alex Busenius -
Caleb James DeLisle -
Ivan Levashew -
Marius Dumitru Florea -
Thomas Mortagne