From: intrigeri <intrigeri@boum.org>
Date: Thu, 26 May 2011 15:00:42 +0000 (+0200)
Subject: Bug report (with security implications) + patch.
X-Git-Tag: 3.20110431~36
X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/commitdiff_plain/e7855fddd9b2840f4e7ad960100e2db90ffce779

Bug report (with security implications) + patch.
---

diff --git a/doc/bugs/po:_po4a_too_strict_on_html_pages.mdwn b/doc/bugs/po:_po4a_too_strict_on_html_pages.mdwn
new file mode 100644
index 000000000..20584e4f4
--- /dev/null
+++ b/doc/bugs/po:_po4a_too_strict_on_html_pages.mdwn
@@ -0,0 +1,16 @@
+On some source .html pages, po4a wrongly detects a malformed document,
+which makes the po plugin error out and the wiki build is aborted.
+
+I've pushed a [[patch]] to my `po` branch to fix this: it makes po4a
+warn, instead of error'ing out, when it detects a malformed input
+document.
+
+This is really a po4a bug which I will report, but since most ikiwiki
+users are gonna live with Squeeze's po4a for a while, I think we
+should workaround it in ikiwiki.
+
+Also, the current state of things makes it a bit too easy to break a
+given ikiwiki site build (DoS) when both the html and po plugins are
+enabled: inserting a html tag without closing it is enough.
+
+--[[intrigeri]]