[sakai2-tcc] Fwd: [Deploying Sakai] Reg: Sakai 2.8.2 Allow HTML in all sites

[Maurer, Christopher Wayne]

That work has been completed and checked in under KNL-640.

Chris

From: David Horwitz <david.horwitz at uct.ac.za<mailto:david.horwitz at uct.ac.za>>
Date: Monday, October 15, 2012 3:00 PM
To: "sakai2-tcc at collab.sakaiproject.org<mailto:sakai2-tcc at collab.sakaiproject.org>" <sakai2-tcc at collab.sakaiproject.org<mailto:sakai2-tcc at collab.sakaiproject.org>>
Subject: Re: [sakai2-tcc] Fwd: [Deploying Sakai] Reg: Sakai 2.8.2 Allow HTML in all sites

-1 this is a huge security hole - we should not ship with this open. The cost of someone exploiting this could be signitficant. The proper fix would be to complete the work Steve G. started to serve static documents from another URL ...

D

On 10/15/2012 08:11 PM, Charles Severance wrote:
I suggest we change this default back in 2.9.0 so we don't have to answer this question one million times.

Lets fix the default  but then add a log message with a warning and the feature that comes up until you explicitly add the line to properties one way or another.

/Chuck

Begin forwarded message:

From: John Bush <john.bush at rsmart.com<mailto:john.bush at rsmart.com>>
Subject: Re: [Deploying Sakai] Reg: Sakai 2.8.2 Allow HTML in all sites
Date: October 15, 2012 2:05:52 PM EDT
To: prabhu <prabhu142003 at gmail.com<mailto:prabhu142003 at gmail.com>>
Cc: production at collab.sakaiproject.org<mailto:production at collab.sakaiproject.org>, Naim Syed <naimsyed at hotmail.com<mailto:naimsyed at hotmail.com>>

content.html.forcedownload=false

On Mon, Oct 15, 2012 at 9:28 AM, prabhu <prabhu142003 at gmail.com<mailto:prabhu142003 at gmail.com>> wrote:
Hi,
     I have migrated from sakai 2.8.0 to sakai 2.8.2. When I login into
Sakai, I am getting a prompt asking me to save or open file with filename as
gatewaywelcome.  How to declare the global setting to accept HTML files,
instead of changing the setting in each and every site manually.

--
-----------------------------------------------------------------------------------------------------------------------------------------------

Regards:

Prabhu Janakaraj,
Consultant Linux and Networking - Training and Deployment,



_______________________________________________
production mailing list
production at collab.sakaiproject.org<mailto:production at collab.sakaiproject.org>
http://collab.sakaiproject.org/mailman/listinfo/production

TO UNSUBSCRIBE: send email to production-unsubscribe at collab.sakaiproject.org<mailto:production-unsubscribe at collab.sakaiproject.org>
with a subject of "unsubscribe"



--
John Bush
602-490-0470
_______________________________________________
production mailing list
production at collab.sakaiproject.org<mailto:production at collab.sakaiproject.org>
http://collab.sakaiproject.org/mailman/listinfo/production

TO UNSUBSCRIBE: send email to production-unsubscribe at collab.sakaiproject.org<mailto:production-unsubscribe at collab.sakaiproject.org> with a subject of "unsubscribe"




_______________________________________________
sakai2-tcc mailing list
sakai2-tcc at collab.sakaiproject.org<mailto:sakai2-tcc at collab.sakaiproject.org>http://collab.sakaiproject.org/mailman/listinfo/sakai2-tcc

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai2-tcc/attachments/20121015/fc571bd1/attachment.html