view @ 5098:ff588e9e24d6

simplify getAttachUrl: remove upload parameter upload=x didn't influence drawing url generation at all, for file url generation one can just give do='upload_form' if one wants the upload url. URL args for do='upload_form' were streamlined to use target=x instead of rename=x so it is more similar to the other code. Removed test for "tainted" file names in URLs. We must not "taint" file names for URLs. Filenames in URLs need to be url-quoted. If a URL is used in html, it needs to be escaped.
author Thomas Waldmann <tw AT waldmann-edv DOT de>
date Sun, 13 Sep 2009 00:06:04 +0200
parents 2a024d3e418f
children 5b262b81c236
line wrap: on
line source

    Standalone server configuration, you can either use this file or
    commandline options to configure server options.
import os

from MoinMoin.script.server.standalone import DefaultConfig

class LocalConfig(DefaultConfig):
    # hostname or IP the server listens on
    # use '' for all interfaces
    # or "" for some specific IP
    #hostname = 'localhost'

    # if you use port < 1024, you need to start as root
    #port = 8080

    # if you start the server as root, the standalone server can change
    # to this user and group, e.g. 'www-data'
    #user = ''
    #group = ''

    # How to debug? Your options:
    # debug = 'off' # for production wikis, exceptions are logged
    # debug = 'web' # show traceback in the browser, offer debug console,
    #               # this makes use of a built-in debugger (werkzeug.debug)
    # debug = 'external' # don't catch Exceptions, so some external debugger gets them
    # CAUTION: Do not use anything but 'off' for production environments as it
    #          might disclose sensitive informations and even enable doing evil
    #          things from some debugger's web interface!
    # For convenience, the default behaviour (see below) is to read the
    # environment variable MOIN_DEBUGGER. If not set, it means the same as 'off'.
    debug = os.environ.get('MOIN_DEBUGGER', 'off')

# DEVELOPERS! Do not add your configuration items there,
# you could accidentally commit them! Instead, create a
# file containing this:
# from wikiserverconfig import LocalConfig
# class Config(LocalConfig):
#     configuration_item_1 = 'value1'

    from wikiserverconfig_local import Config
except ImportError, err:
    if not str(err).endswith('wikiserverconfig_local'):
    Config = LocalConfig