On 04/12/2012 07:58 AM, Ludovic Dubost wrote:
I think unfortunately that you can manually set this in your browser at least in Firefox. XWiki's core does not do any check on the value of the language
It does since August 2010 (there's no issue for it, though), and will only accept valid locale values in the ISO-639 format (plus "default").
Ludovic 2012/4/12 Paul Libbrecht<[email protected]>Hello developers, We had some (rare) users that had a very bad issue because we told their browser to load the lang_xx.js of their language. And their language was... wild! See: http://jira.xwiki.org/browse/CURRIKI-5694 for a sample of the things that got submitted to us. Sure, we'll now protect against these bizarre languages, still, there might be other things broken. Is there some guarantee on the set of possible languages provided by $context.language? I was expect the possible values of ISO-623-1 but that was clearly not sufficient! paul
-- Sergiu Dumitriu http://purl.org/net/sergiu/ _______________________________________________ devs mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/devs
