View Issue Details

IDProjectCategoryView StatusLast Update
4647Composrcore_rich_mediapublic2021-05-02 15:29
ReporterChris Graham Assigned ToChris Graham  
PriorityhighSeveritymajor 
Status resolvedResolutionfixed 
Product Version10.0.37 
Fixed in Version10.0.38 
Summary4647: Complex Comcode permissions issue for those on HTML inclusion-list
DescriptionThose users who are on the inclusion list for HTML, may not be able to use any base-URL-prefixed-URL with an <a> tag. This is due to how Composr tacks a rel on the end automatically, which causes HTML which doesn't match the inclusion list, and the fallback code doesn't parse the Comcode BASE_URL symbol which would have been inserted automatically to ensure portability.

Fix the inclusion list, and fix the fallback to support BASE_URL.
TagsNo tags attached.
Attach Tags
Attached Files
Time estimation (hours)
Sponsorship open

Sponsor

Date Added Member Amount Sponsored

Activities

admin

2021-05-02 15:29

administrator   ~7083

Fixed in git commit 2c05e2444 (https://gitlab.com/composr-foundation/composr/commit/2c05e2444 - link will become active once code pushed to GitLab)

A hotfix (a TAR of files to upload) has been uploaded to this issue. These files are made to the latest intra-version state (i.e. may roll in earlier fixes too if made to the same files) - so only upload files newer than what you have already. If there are files in a hot-fix that you don't have then they probably relate to addons that you don't have installed and should be skipped. Always take backups of files you are replacing or keep a copy of the manual installer for your version, and only apply fixes you need. These hotfixes are not necessarily reliable or well supported. Not sure how to extract TAR files to your Windows computer? Try 7-zip (http://www.7-zip.org/).

Issue History

Date Modified Username Field Change