Item9268: Taint error if viewfile called with missing web

pencil
Priority: Urgent
Current State: Closed
Released In: 1.1.0
Target Release: minor
Applies To: Engine
Component: viewfile
Branches:
Reported By: GeorgeClark
Waiting For:
Last Change By: CrawfordCurrie
URL was http://my.server.com/pub/blah

ApacheConfigGenerator had created for the pub directory: ErrorDocument 404 /bin/viewfile

Assertion (web is tainted) failed!
 at /var/www/foswiki/trunk/core/lib/Assert.pm line 78
   Assert::ASSERT(undef, 'web is tainted') called at /var/www/foswiki/trunk/core/lib/Foswiki.pm line 3444
   Foswiki::webExists('Foswiki=HASH(0x8462d68)', 'nytprofx') called at /var/www/foswiki/trunk/core/lib/Foswiki/UI/Viewfile.pm line 79
   Foswiki::UI::Viewfile::viewfile('Foswiki=HASH(0x8462d68)') called at /var/www/foswiki/trunk/core/lib/Foswiki/UI.pm line 310
   Foswiki::UI::__ANON__() called at /usr/lib/perl5/vendor_perl/5.10.1/Error.pm line 415
   eval {...} called at /usr/lib/perl5/vendor_perl/5.10.1/Error.pm line 407
   Error::subs::try('CODE(0x804e2c8)', 'HASH(0x8467dc8)') called at /var/www/foswiki/trunk/core/lib/Foswiki/UI.pm line 429
   Foswiki::UI::_execute('Foswiki::Request=HASH(0x844fe60)', 'CODE(0x806f8e0)', 'viewfile', 1) called at /var/www/foswiki/trunk/core/lib/Foswiki/UI.pm line 277
   Foswiki::UI::handleRequest('Foswiki::Request=HASH(0x844fe60)') called at /var/www/foswiki/trunk/core/lib/Foswiki/Engine/CGI.pm line 30
   Foswiki::Engine::CGI::run('Foswiki::Engine::CGI=HASH(0x81fa7b0)') called at viewfile line 24.

-- GeorgeClark - 07 Jul 2010

There was also a tricky little error with topic contexts that I happened to find because I have the WorkflowPlugin loaded.

-- CrawfordCurrie - 07 Jul 2010

 

ItemTemplate edit

Summary Taint error if viewfile called with missing web
ReportedBy GeorgeClark
Codebase trunk
SVN Range
AppliesTo Engine
Component viewfile
Priority Urgent
CurrentState Closed
WaitingFor
Checkins distro:3a218cb17c8d
TargetRelease minor
ReleasedIn 1.1.0
Topic revision: r2 - 07 Jul 2010, CrawfordCurrie
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy