Alright so I'm going through the code for wiki_convert and thinking about the problems I've been having with using HTML for wiki, but having that setting bleed into all inputs in the system.
I think I have a simple solution, but let me know what people think: 1. The setting to use HTML for the wiki should be constrained by whether anonymous or nobody can input into that area. So even though I check "HTML for wiki", if anonymous can input wiki, then wiki syntax is used. 2. In wiki_convert where the renderer.state is being setup, you'd have a flag of something like ANONYMOUS_ALLOWED that'd come from the security system by the caller. 3. That flag would then disable the WIKI_USE_HTML flag if it this flag is set. This would then prevent people from shooting themselves in the foot, and tends to do what people think happens with HTML as wiki. It's assumed that this means, "HTML for wiki where it's safe to do HTML." I'd be willing to work up the patch on this if people think that's a good way to do it After that I'd like to make the wiki_convert stop interpreting wiki links when HTML is on. -- Zed A. Shaw http://zedshaw.com/ _______________________________________________ fossil-users mailing list [email protected] http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
