move security to discussion

[git.ikiwiki.info.git] / doc / todo / inline_autotitles.mdwn

diff --git a/doc/todo/inline_autotitles.mdwn b/doc/todo/inline_autotitles.mdwn
index 4c45ebf00e48769084487d26d3b3d0193f2fd1e3..8bf71deaed5571978e7638d8429ecf5195586d47 100644 (file)
--- a/doc/todo/inline_autotitles.mdwn
+++ b/doc/todo/inline_autotitles.mdwn
@@ -25,8 +25,12 @@ in unexpexted strftime substitution (strftime might not even substitute for
 common uses of percent as in "reach 10% market share", but might in others as
 in "the 10%-rule").
 
-both can be circumvented by using another GET parameter for autotexts, for
-which i could provide a patch. (as of writing this, i think i'll do that.)
+both can be circumvented by using another GET parameter for autotexts, as
+implemented in [3].
+> this patch still does not work perfectly; especially, it should make a
+> distinction between "autotitle is set but equal ''" (in which case it
+> should create a page named `1.mdwn`, and "autotitle is not set, and title is
+> equal ''" (in which case it should display the old error message) --[[chrysn]]
 
 ### potential security issues
 
@@ -44,3 +48,4 @@ munging would be yet another thing.
 
 [1]: http://github.com/github076986099/ikiwiki/commit/b568eb257a3ef5ff49a84ac00a3a7465b643c1e1
 [2]: http://github.com/github076986099/ikiwiki/commit/34bc82f232be141edf036d35e8ef5aa289415072
+[3]: http://github.com/github076986099/ikiwiki/commit/40dc10a4ec7809e401b4497c2abccfba30f7a2af