response

[git.ikiwiki.info.git] / doc / forum / Apache_XBitHack.mdwn

diff --git a/doc/forum/Apache_XBitHack.mdwn b/doc/forum/Apache_XBitHack.mdwn
index 5def2f817b6b0a79a5b4b99cc93df538e6119d7a..d5da0825e9ffc09a02913f5f5a37ed5b96e85173 100644 (file)
--- a/doc/forum/Apache_XBitHack.mdwn
+++ b/doc/forum/Apache_XBitHack.mdwn
@@ -13,3 +13,16 @@ I gather from the [[security]] page that having the executable bit set on files
 > would result in a html page that can be run as an executable. So an
 > option that makes all files rendered from mdwn or other markups 
 > get the x bit set would be pretty safe even with untrusted editors. --[[Joey]] 
 > would result in a html page that can be run as an executable. So an
 > option that makes all files rendered from mdwn or other markups 
 > get the x bit set would be pretty safe even with untrusted editors. --[[Joey]] 

+
+>> So how about this: if something has a page-type (i.e. mdwn or whatever authorized page types there are)
+>> then add something at the end of the process (would that be the "changes" hook?)
+>> which sets the x bit on the generated page file.  Would that work?
+
+>> Or is there a way to say "tell me all the generated files that end in .html" and use that as a list to start from?
+
+>> --[[KathrynAndersen]]
+
+>>> Yes, the `change` hook is passed the names of source files that got
+>>> built. Use `pagetype` to check which got htmlized (and filter out ones
+>>> that got copied), and then use `htmlpage` to get the name of the html
+>>> file that was generated, and chmod it. --[[Joey]]