passwordauth: avoid userinfo forgery via repeated email parameter

[git.ikiwiki.info.git] / doc / plugins / contrib / postal.mdwn

diff --git a/doc/plugins/contrib/postal.mdwn b/doc/plugins/contrib/postal.mdwn
index b14c80d3b21ce5e1f47b093e4adb0a4888affb74..c522f8bcbfa94a27d9d549afbb1869ffd12a8736 100644 (file)
--- a/doc/plugins/contrib/postal.mdwn
+++ b/doc/plugins/contrib/postal.mdwn
@@ -1,5 +1,5 @@
 [[!template id=plugin name=postal author="[[DavidBremner]]"]]
 [[!template id=plugin name=postal author="[[DavidBremner]]"]]

-[[!tag type/useful]]
+[[!tag type/special-purpose]]

 
 The `postal` plugin allows users to send mail to
 a special address to comment on a page. It uses the [[mailbox]]
 
 The `postal` plugin allows users to send mail to
 a special address to comment on a page. It uses the [[mailbox]]


@@ -18,21 +18,17 @@ Details:
     [more details](http://www.cs.unb.ca/~bremner/blog/posts/encoding)         
    
   * on the mail receiving end, these messages are either deleted, or ran through
     [more details](http://www.cs.unb.ca/~bremner/blog/posts/encoding)         
    
   * on the mail receiving end, these messages are either deleted, or ran through

-    a filter to be turned into blog posts.  As a first step, I have
-[written](http://pivot.cs.unb.ca/git/?p=ikipostal.git;a=blob_plain;f=filters/postal-filer.pl;hb=010357a08e9)
-a filter that decodes the address and writes the message into an appropriate 
-mailbox. I would be interested in any ideas people have about security.
-
-  * the same plugin can check for comments on a particular page next time the wiki 
-    is generated, and add a link. (more or less done)
-    > If the filter just checks in the posts into revision control, the
-    > post-commit hook would handle updating the wiki to include those
-    > posts as they come in. --[[Joey]]
+    a filter to be turned into blog posts.   I have
+[written](http://pivot.cs.unb.ca/git/?p=ikipostal.git;a=blob_plain;f=filters/postal-accept.pl;hb=HEAD)
+  a filter that decodes the address and writes the message into an appropriate 
+mailbox. The changes are then checked into version control; typically a hook then updates the html version of the wiki.

   * work in progress can be 
 
    - [cloned](http://pivot.cs.unb.ca/git/ikipostal.git), or 
    - [browsed](http://pivot.cs.unb.ca/git/?p=ikipostal.git;a=summary)
   
   * work in progress can be 
 
    - [cloned](http://pivot.cs.unb.ca/git/ikipostal.git), or 
    - [browsed](http://pivot.cs.unb.ca/git/?p=ikipostal.git;a=summary)
   

+ * I would be interested in any ideas people have about security.
+

 The current version of this plugin is now running on my home page. See for example
 [a recent post in my blog](http://www.cs.unb.ca/~bremner/blog/posts/can-i-haz-a-distributed-rss/).  
 Unfortunately although the [[mailbox|todo/mbox]] renderer supports threading, I haven't had 
 The current version of this plugin is now running on my home page. See for example
 [a recent post in my blog](http://www.cs.unb.ca/~bremner/blog/posts/can-i-haz-a-distributed-rss/).  
 Unfortunately although the [[mailbox|todo/mbox]] renderer supports threading, I haven't had