From 17fa98396cb7d8b380bb821577532d30a38d5680 Mon Sep 17 00:00:00 2001 From: joshtriplett Date: Fri, 6 Apr 2007 05:38:02 +0000 Subject: Add todo item for blocking external links. --- doc/todo/block_external_links.mdwn | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 doc/todo/block_external_links.mdwn (limited to 'doc/todo') diff --git a/doc/todo/block_external_links.mdwn b/doc/todo/block_external_links.mdwn new file mode 100644 index 000000000..f62897a88 --- /dev/null +++ b/doc/todo/block_external_links.mdwn @@ -0,0 +1,14 @@ +I'd like the ability to block external links from anonymous users, or from +untrusted users. This could work by generating the HTML for the new page and +comparing it to the HTML for the old page, looking for any new tags with +href values that didn't exist in the old page and don't start with the URL of +the wiki. Comparing the HTML, rather than the input, allows usage with +various types of input formats, and ensures that a template, shortcut, or some +new plugin will not bypass the filter. + +This would probably benefit from a whitelist of acceptable external URLs. + +This may actually form a subset of the general concept of content policies, +described at [[todo/fileupload]]. + +--[[JoshTriplett]] -- cgit v1.2.3