[sakai2-tcc] Fwd: [Deploying Sakai] Reg: Sakai 2.8.2 Allow HTML in all sites
David Horwitz
david.horwitz at uct.ac.za
Mon Oct 15 12:00:07 PDT 2012
-1 this is a huge security hole - we should not ship with this open. The
cost of someone exploiting this could be signitficant. The proper fix
would be to complete the work Steve G. started to serve static documents
from another URL ...
D
On 10/15/2012 08:11 PM, Charles Severance wrote:
> I suggest we change this default back in 2.9.0 so we don't have to
> answer this question one million times.
>
> Lets fix the default but then add a log message with a warning and
> the feature that comes up until you explicitly add the line to
> properties one way or another.
>
> /Chuck
>
> Begin forwarded message:
>
>> *From: *John Bush <john.bush at rsmart.com <mailto:john.bush at rsmart.com>>
>> *Subject: **Re: [Deploying Sakai] Reg: Sakai 2.8.2 Allow HTML in all
>> sites*
>> *Date: *October 15, 2012 2:05:52 PM EDT
>> *To: *prabhu <prabhu142003 at gmail.com <mailto:prabhu142003 at gmail.com>>
>> *Cc: *production at collab.sakaiproject.org
>> <mailto:production at collab.sakaiproject.org>, Naim Syed
>> <naimsyed at hotmail.com <mailto:naimsyed at hotmail.com>>
>>
>> content.html.forcedownload=false
>>
>> On Mon, Oct 15, 2012 at 9:28 AM, prabhu <prabhu142003 at gmail.com
>> <mailto:prabhu142003 at gmail.com>> wrote:
>>> Hi,
>>> I have migrated from sakai 2.8.0 to sakai 2.8.2. When I login into
>>> Sakai, I am getting a prompt asking me to save or open file with
>>> filename as
>>> gatewaywelcome. How to declare the global setting to accept HTML files,
>>> instead of changing the setting in each and every site manually.
>>>
>>> --
>>> -----------------------------------------------------------------------------------------------------------------------------------------------
>>>
>>> Regards:
>>>
>>> Prabhu Janakaraj,
>>> Consultant Linux and Networking - Training and Deployment,
>>>
>>>
>>>
>>> _______________________________________________
>>> production mailing list
>>> production at collab.sakaiproject.org
>>> <mailto:production at collab.sakaiproject.org>
>>> http://collab.sakaiproject.org/mailman/listinfo/production
>>>
>>> TO UNSUBSCRIBE: send email to
>>> production-unsubscribe at collab.sakaiproject.org
>>> <mailto:production-unsubscribe at collab.sakaiproject.org>
>>> with a subject of "unsubscribe"
>>
>>
>>
>> --
>> John Bush
>> 602-490-0470
>> _______________________________________________
>> production mailing list
>> production at collab.sakaiproject.org
>> <mailto:production at collab.sakaiproject.org>
>> http://collab.sakaiproject.org/mailman/listinfo/production
>>
>> TO UNSUBSCRIBE: send email to
>> production-unsubscribe at collab.sakaiproject.org with a subject of
>> "unsubscribe"
>
>
>
> _______________________________________________
> sakai2-tcc mailing list
> sakai2-tcc at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai2-tcc
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai2-tcc/attachments/20121015/38a7a8e3/attachment.html
More information about the sakai2-tcc
mailing list