unofficial mirror of notmuch@notmuchmail.org
 help / color / mirror / code / Atom feed
From: Marten Veldthuis <marten@veldthuis.com>
To: Carl Worth <cworth@cworth.org>, notmuch@notmuchmail.org
Subject: Re: New wiki instance on the notmuchmail.org website
Date: Wed, 03 Feb 2010 18:14:27 +0100	[thread overview]
Message-ID: <871vh2utqk.fsf@marten.rgoc.rug.nl> (raw)
In-Reply-To: <87r5p2p8pe.fsf@yoom.home.cworth.org>

On Wed, 03 Feb 2010 08:47:41 -0800, Carl Worth <cworth@cworth.org> wrote:
> See this page for details (particularly the "security" and
> "infelicities" sections):
> 
> 	http://ikiwiki.info/tips/untrusted_git_push/

Ah. Probably this section:

  So, unless you have the attachment plugin turned on, non-page files
  cannot be added. And if it's turned on, whatever allowed_attachments
  checks you have configured will also check files pushed into git.

since I was trying to add some screenshots of the Emacs interface. It
makes perfect sense not to enable this plugin though, given the security
implications (people could potentially upload mp3's as png's etc).

Let me know if I should send you the commit off-list or if you don't
mind enabling the attachment plugin for eg common image filetypes.

-- 
- Marten

  reply	other threads:[~2010-02-03 17:14 UTC|newest]

Thread overview: 27+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2010-02-03  7:44 New wiki instance on the notmuchmail.org website Carl Worth
2010-02-03  8:44 ` Sebastian Spaeth
2010-02-03 15:58   ` Jameson Rollins
2010-02-03 16:52   ` Carl Worth
2010-02-03 13:23 ` micah anderson
2010-02-03 14:19   ` Marten Veldthuis
2010-02-03 14:36     ` Matthew Gregg
2010-02-03 14:53       ` Marten Veldthuis
2010-02-03 20:18         ` Git commit mails (was: New wiki instance on the notmuchmail.org website) martin f krafft
2010-02-03 20:24           ` David Bremner
2010-02-03 20:41             ` martin f krafft
2010-02-03 23:37               ` list subject prefixes [was: Git commit mails (was: New wiki instance on the notmuchmail.org website)] Jameson Rollins
2010-02-04  0:05                 ` David Bremner
2010-02-04  4:15                 ` micah anderson
2010-02-04  4:14           ` Git commit mails (was: New wiki instance on the notmuchmail.org website) Servilio Afre Puentes
2010-02-04  5:05             ` martin f krafft
2010-02-04  6:18               ` Servilio Afre Puentes
2010-02-04  6:38                 ` martin f krafft
2010-02-06 22:56                   ` Carl Worth
2010-02-06 23:38                     ` martin f krafft
2010-02-03 14:40 ` New wiki instance on the notmuchmail.org website Marten Veldthuis
2010-02-03 16:47   ` Carl Worth
2010-02-03 17:14     ` Marten Veldthuis [this message]
2010-11-23 17:17       ` Michal Sojka
2010-11-23 21:12         ` Carl Worth
2010-11-24  5:41           ` Michal Sojka
2010-11-24  6:26             ` Carl Worth

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://notmuchmail.org/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=871vh2utqk.fsf@marten.rgoc.rug.nl \
    --to=marten@veldthuis.com \
    --cc=cworth@cworth.org \
    --cc=notmuch@notmuchmail.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this public inbox

	https://yhetil.org/notmuch.git/

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).