Implemented --underlaydir, and moved files provided by underlay out of doc

[ikiwiki.git] / doc / todo / done / underlay.mdwn

diff --git a/doc/todo/done/underlay.mdwn b/doc/todo/done/underlay.mdwn
new file mode 100644 (file)
index 0000000..48e7949
--- /dev/null
+++ b/doc/todo/done/underlay.mdwn
@@ -0,0 +1,11 @@
+Rather than copy the basewiki around everywhere, it should be configured to
+underlay the main srcdir, and pages be rendered from there if not in the
+srcdir. This would allow upgrades to add/edit pages in the basewiki.
+
+Implementaion will be slightly tricky since currently ikiwiki is hardcoded
+in many places to look in srcdir for pages. Also, there are possible
+security attacks in the vein of providing a file ikiwiki would normally
+skip in the srcdir, and tricking it to processing this file instead of the
+one from the underlaydir. -- Fixed by scanning srcdir first, then
+underlaydir, and refusing to add any files from underlaydir if they also
+exist in the srcdir. However, see [[security]] for caveats.