diff options
Diffstat (limited to 'doc/todo')
| -rw-r--r-- | doc/todo/done/underlay.mdwn (renamed from doc/todo/underlay.mdwn) | 12 |
1 files changed, 4 insertions, 8 deletions
diff --git a/doc/todo/underlay.mdwn b/doc/todo/done/underlay.mdwn index 20266260f..48e79498d 100644 --- a/doc/todo/underlay.mdwn +++ b/doc/todo/done/underlay.mdwn @@ -2,14 +2,10 @@ Rather than copy the basewiki around everywhere, it should be configured to underlay the main srcdir, and pages be rendered from there if not in the srcdir. This would allow upgrades to add/edit pages in the basewiki. -Impementaion will be slightly tricky since currently ikiwiki is hardcoded +Implementaion will be slightly tricky since currently ikiwiki is hardcoded in many places to look in srcdir for pages. Also, there are possible security attacks in the vein of providing a file ikiwiki would normally skip in the srcdir, and tricking it to processing this file instead of the -one from the underlaydir. - -There are also difficulties related to removing files from the srcdir, and -exposing ones from the underlaydir. Will need to make sure that the mtime -for the source file is zeroed when the page is removed, and that it then -finds the underlay file and treats it as newer. - +one from the underlaydir. -- Fixed by scanning srcdir first, then +underlaydir, and refusing to add any files from underlaydir if they also +exist in the srcdir. However, see [[security]] for caveats. |