Subversion Repositories wimsdev

Rev

Rev 14632 | Rev 17089 | Go to most recent revision | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log | RSS feed

Rev 14632 Rev 14637
Line 10... Line 10...
10 
!!# see code injection samples here : https://www.codeproject.com/Articles/134024/HTML-and-JavaScript-Injection
 10 
!!# see code injection samples here : https://www.codeproject.com/Articles/134024/HTML-and-JavaScript-Injection
11 
!!# all prohibited words must be set without CAPS
 11 
!!# all prohibited words must be set without CAPS
12 
!!prohibited_words=</script >,</form >,</script>,</form>,<meta,behavior:,javascript:,onabort=,onafterprint=,onanimationend=,onanimationiteration=,onanimationstart=,onbeforeprint=,onbeforeunload=,onblur=,oncanplay=,oncanplaythrough=,onchange=,onclick=,oncontextmenu=,oncopy=,oncut=,ondblclick=,ondrag=,ondragend=,ondragenter=,ondragleave=,ondragover=,ondragstart=,ondrop=,ondurationchange=,onended=,onerror=,onfocus=,onfocusin=,onfocusout=,onfullscreenchange=,onfullscreenerror=,onhashchange=,oninput=,oninvalid=,onkeydown=,onkeypress=,onkeyup=,onload=,onloadeddata=,onloadedmetadata=,onloadstart=,onmessage=,onmousedown=,onmouseenter=,onmouseleave=,onmousemove=,onmouseover=,onmouseout=,onmouseup=,onmousewheel=,onoffline=,ononline=,onopen=,onpagehide=,onpageshow=,onpaste=,onpause=,onplay=,onplaying=,onpopstate=,onprogress=,onratechange=,onresize=,onreset=,onscroll=,onsearch=,onseeked=,onseeking=,onselect=,onshow=,onstalled=,onstorage=,onsubmit=,onsuspend=,ontimeupdate=,ontoggle=,ontouchcancel=,ontouchend=,ontouchmove=,ontouchstart=,ontransitionend=,onunload=,onvolumechange=,onwaiting=,onwheel=
 12 
!!prohibited_words=</script >,</form >,</script>,</form>,<meta,behavior:,javascript:,onabort=,onafterprint=,onanimationend=,onanimationiteration=,onanimationstart=,onbeforeprint=,onbeforeunload=,onblur=,oncanplay=,oncanplaythrough=,onchange=,onclick=,oncontextmenu=,oncopy=,oncut=,ondblclick=,ondrag=,ondragend=,ondragenter=,ondragleave=,ondragover=,ondragstart=,ondrop=,ondurationchange=,onended=,onerror=,onfocus=,onfocusin=,onfocusout=,onfullscreenchange=,onfullscreenerror=,onhashchange=,oninput=,oninvalid=,onkeydown=,onkeypress=,onkeyup=,onload=,onloadeddata=,onloadedmetadata=,onloadstart=,onmessage=,onmousedown=,onmouseenter=,onmouseleave=,onmousemove=,onmouseover=,onmouseout=,onmouseup=,onmousewheel=,onoffline=,ononline=,onopen=,onpagehide=,onpageshow=,onpaste=,onpause=,onplay=,onplaying=,onpopstate=,onprogress=,onratechange=,onresize=,onreset=,onscroll=,onsearch=,onseeked=,onseeking=,onselect=,onshow=,onstalled=,onstorage=,onsubmit=,onsuspend=,ontimeupdate=,ontoggle=,ontouchcancel=,ontouchend=,ontouchmove=,ontouchstart=,ontransitionend=,onunload=,onvolumechange=,onwaiting=,onwheel=
13 
wims_trustfile=primitives.phtml
 13 
wims_trustfile=primitives.phtml
14 
wims_nw=Forumdir forumdir mb_readpolicy mb_sendpolicy mb_password \
 14 
wims_nw=Forumdir forumdir mb_readpolicy mb_sendpolicy mb_password \
15 
	mb_creation spolycode rpolycode mb_title mb_supervisor \
 15 
	mb_creation mb_nolink spolycode rpolycode mb_title mb_supervisor \
16 
	mb_mail send_right read_right s_hidecode is_owner forumrealuser forumuser \
 16 
	mb_mail send_right read_right s_hidecode is_owner forumrealuser forumuser \
17 
	user_lastname user_firstname user_email fuser fpassword \
 17 
	user_lastname user_firstname user_email fuser fpassword \
18 
	month ident s_hidecode c_smail \
 18 
	month ident s_hidecode c_smail \
19 
	empty
 19 
	empty
20 
wims_nr=wims_sesrandom
 20 
wims_nr=wims_sesrandom
Line 62... Line 62...
62 
 
 62 
 
63 
!!module_title=$mb_title
 63 
!!module_title=$mb_title
64 
 
 64 
 
65 
!if $job iswordof preview send
 65 
!if $job iswordof preview send
66 
  lens=!sh cd $wims_home; bin/msg2wims $wims_sesdir/user-deposit $wims_sesdir/message.wims
 66 
  lens=!sh cd $wims_home; bin/msg2wims $wims_sesdir/user-deposit $wims_sesdir/message.wims
- 
 
 67 
  !if $wims_user=supervisor or $mb_nolink!=yes
- 
 
 68 
    script_option=allowlink
- 
 
 69 
  !endif
67 
  !readproc adm/partialdetag.proc file $wims_home/$wims_sesdir/message.wims $wims_home/$wims_sesdir/message.wims
 70 
  !readproc adm/partialdetag.proc file $wims_home/$wims_sesdir/message.wims $wims_home/$wims_sesdir/message.wims
68 
  !if $wims_exec_error!=$empty
 71 
  !if $wims_exec_error!=$empty
69 
    t=!trim $wims_exec_error
 72 
    t=!trim $wims_exec_error
70 
    !if $t!=open_tag
 73 
    !if $t!=open_tag
71 
      error=$wims_exec_error
 74 
      error=$wims_exec_error