+1

watch out for security / template injection attacks: e.g. see
http://blog.portswigger.net/2015/08/server-side-template-injection.html

set

configuration.setNewBuiltinClassResolver(TemplateClassResolver.
ALLOWS_NOTHING_RESOLVER);

2017-01-03 16:07 GMT+01:00 Taher Alkhateeb <[email protected]>:

> Very cool idea, and I think in worst case scenario not too difficult to
> redo the work if needed. It's just one page that calls the parser.
>
> On Jan 3, 2017 3:27 PM, "Daniel Dekany" <[email protected]> wrote:
>
> > Probably there will be a higher chance for positive answer if we can
> > offer running the service too. Because I guess that's a burden for
> > them, while owning a piece of software on GitHub is not, that's just
> > good PR.
> >
> >
> > Tuesday, January 3, 2017, 12:53:12 PM, Jacques Le Roux wrote:
> >
> > > Le 03/01/2017 à 09:32, Jacopo Cappellato a écrit :
> > >> Hi all,
> > >>
> > >> a couple of days ago Daniel brought to my attention the site/service:
> > >>
> > >> http://freemarker-online.kenshoo.com/
> > >>
> > >> They provide a nice online tool to evaluate any Freemarker template by
> > >> providing the template code and its context.
> > >>
> > >> Wouldn't be nice is we could offer that or a similar service to the
> > users
> > >> and potential adopters of Freemarker? I think it would be a very
> useful
> > >> tool and also a good mechanism to attract new consumers.
> > >>
> > >> If there is an interest in this community then we could move in two
> > >> directions:
> > >>
> > >> 1) get in touch with the maintainers of freemarker-online and see if
> > they
> > >> are interested to contribute their work [*] or join our community and
> > help
> > >> to build a similar one here; if they are not interested then we could
> > >> discuss if it would make sense to build our own here
> > >>
> > >> 2) get in touch with the Infra team and explore the possibility to set
> > up a
> > >> virtual machine to dedicated to our project that we could use to
> deploy
> > a
> > >> similar service, from our official website
> > >>
> > >> I can volunteer to try to get in touch with them (#1); any volunteers
> > for
> > >> #2 (or even #1)?
> > >>
> > >> Kind regards,
> > >>
> > >> Jacopo
> > >>
> > >> [*] which is licensed with the AL2.0 and available here:
> > >> https://github.com/kenshoo/freemarker-online
> > >>
> > > Hi Jacopo,
> > >
> > > I can take care of 2, I'm used to these kind of things for OFBiz
> > > I guess 1 is a prerequisite and I'm not well placed for this task.
> > >
> > > Jacques
> > >
> > >
> >
> > --
> > Thanks,
> >  Daniel Dekany
> >
> >
>



-- 
Christoph Rüger, Geschäftsführer
Synesty <https://synesty.com/> - Automatisierung, Schnittstellen, Datenfeeds
Tel.: +49 3641/559649

Xing: https://www.xing.com/profile/Christoph_Rueger2
LinkedIn: http://www.linkedin.com/pub/christoph-rueger/a/685/198

-- 
Synesty GmbH
Moritz-von-Rohr-Str. 1a
07745 Jena
Tel.: +49 3641 559649
Fax.: +49 3641 5596499
Internet: http://synesty.com

Geschäftsführer: Christoph Rüger
Unternehmenssitz: Jena
Handelsregister B beim Amtsgericht: Jena
Handelsregister-Nummer: HRB 508766
Ust-IdNr.: DE287564982

Reply via email to