diff options
| -rw-r--r-- | doc/forum/Apache_XBitHack.mdwn | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/doc/forum/Apache_XBitHack.mdwn b/doc/forum/Apache_XBitHack.mdwn index 5def2f817..63d33287e 100644 --- a/doc/forum/Apache_XBitHack.mdwn +++ b/doc/forum/Apache_XBitHack.mdwn @@ -13,3 +13,8 @@ I gather from the [[security]] page that having the executable bit set on files > would result in a html page that can be run as an executable. So an > option that makes all files rendered from mdwn or other markups > get the x bit set would be pretty safe even with untrusted editors. --[[Joey]] + +>> So how about this: if something has a page-type (i.e. mdwn or whatever authorized page types there are) +>> then add something at the end of the process (would that be the "changes" hook?) +>> which sets the x bit on the generated page file. Would that work? +>> --[[KathrynAndersen]] |