From e7855fddd9b2840f4e7ad960100e2db90ffce779 Mon Sep 17 00:00:00 2001 From: intrigeri Date: Thu, 26 May 2011 17:00:42 +0200 Subject: [PATCH] Bug report (with security implications) + patch. --- doc/bugs/po:_po4a_too_strict_on_html_pages.mdwn | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 doc/bugs/po:_po4a_too_strict_on_html_pages.mdwn diff --git a/doc/bugs/po:_po4a_too_strict_on_html_pages.mdwn b/doc/bugs/po:_po4a_too_strict_on_html_pages.mdwn new file mode 100644 index 000000000..20584e4f4 --- /dev/null +++ b/doc/bugs/po:_po4a_too_strict_on_html_pages.mdwn @@ -0,0 +1,16 @@ +On some source .html pages, po4a wrongly detects a malformed document, +which makes the po plugin error out and the wiki build is aborted. + +I've pushed a [[patch]] to my `po` branch to fix this: it makes po4a +warn, instead of error'ing out, when it detects a malformed input +document. + +This is really a po4a bug which I will report, but since most ikiwiki +users are gonna live with Squeeze's po4a for a while, I think we +should workaround it in ikiwiki. + +Also, the current state of things makes it a bit too easy to break a +given ikiwiki site build (DoS) when both the html and po plugins are +enabled: inserting a html tag without closing it is enough. + +--[[intrigeri]] -- 2.44.0