[xwiki-users] Using with xwiki: nightmare??

2012-12-02 Thread David Delbecq 
Hello, 


i'd like some informations on how to get xwiki + velocity to render properly a 
form containing a prefilled . I have tried several way and, in the 
end, i ended up using a groovy script, which requires developper priviledge. 
All other options i tried had issues. Could someone tell me if there is a way 
to get it to work with. 

I have a variable X, i want content of X to be html escaped (eg  becomes 
) and output in the final document between   
tags. 

So far, i attempted the following 


{{velocity}} 
#set($test = "**hello**test") 
{{html clean="false" xwiki="false"}} 
$test 
{{/html}} 
{{/velocity}} 

{{velocity xwiki="false"}} 
#set($test2 = "**hello2**test") 
{{/velocity}} 
{{html clean="false" xwiki="false"}}{{/html}}{{velocity 
xwiki="false"}}${test2}{{/velocity}}{{html clean="false" 
xwiki="false"}}{{/html}} 


{{velocity xwiki="false"}} 
#set($test3 = "**hello3**test") 
{{/velocity}} 
{{html clean="false" xwiki="false"}}{{/html}}{{velocity 
xwiki="false"}}${test3}{{/velocity}}{{html clean="false" 
xwiki="false"}}{{/html}} 


{{groovy}} 
test4 = 
org.apache.commons.lang.StringEscapeUtils.escapeHtml("**hello4**test"); 
{{/groovy}} 
{{velocity xwiki="false"}}{{html clean="false" xwiki="false"}}${test4}{{/html}}{{/velocity}} 


And got the following renders (html sources) 


< textarea cols = "75" rows = "2" name = "description" >**hello**test 

< textarea cols = "75" rows = "2" name = "description" 
>hello2test 

< textarea cols = "75" rows = "2" name = "description" 
>hello3test 

< textarea cols = "75" rows = "2" name = "description" 
>**hello4**test 
As you can see: option 1 left  tags as is, which can lead to html 
injection vulnerability of my form. 
option 2 and 3 replaced ** with  which mean we alter user input :/ 
option 4 works but requires developper priviledges. :/ 


David Delbecq 

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] (no subject)

2012-12-02 Thread Vincent Massol 

On Dec 2, 2012, at 10:34 PM, Sergiu Dumitriu  wrote:

> On 12/02/2012 04:31 PM, Vincent Massol wrote:
>> Hi,
>> 
>> On Dec 2, 2012, at 1:58 PM, Дмитрий Федин  wrote:
>> 
>>> Hello!
>>> 
>>> Do I have the ability to connect openoffice server to my xwiki on 
>>> MYXWIKIfarm and haw I can do it?
>>> At the preference page writen, that this setting is installed at  
>>> xwiki.properties at main wiki!.
>> 
>> No, at the moment, myxwiki.org doesn't offer an open source server.
> 
> Of course, Vincent meant that myxwiki.org doesn't offer an open office
> server.

oops sorry, thanks for correcting me Sergiu…. My hands slipped. Indeed I meant 
open office server… :)

-Vincent

> 
>> We may add one in the future though but no promise nor deadline.
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] (no subject)

2012-12-02 Thread Sergiu Dumitriu 
On 12/02/2012 04:31 PM, Vincent Massol wrote:
> Hi,
> 
> On Dec 2, 2012, at 1:58 PM, Дмитрий Федин  wrote:
> 
>> Hello!
>>
>> Do I have the ability to connect openoffice server to my xwiki on 
>> MYXWIKIfarm and haw I can do it?
>> At the preference page writen, that this setting is installed at  
>> xwiki.properties at main wiki!.
> 
> No, at the moment, myxwiki.org doesn't offer an open source server.

Of course, Vincent meant that myxwiki.org doesn't offer an open office
server.

> We may add one in the future though but no promise nor deadline.

-- 
Sergiu Dumitriu
http://purl.org/net/sergiu/
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] (no subject)

2012-12-02 Thread Vincent Massol 
Hi,

On Dec 2, 2012, at 1:58 PM, Дмитрий Федин  wrote:

> Hello!
> 
> Do I have the ability to connect openoffice server to my xwiki on MYXWIKIfarm 
> and haw I can do it?
> At the preference page writen, that this setting is installed at  
> xwiki.properties at main wiki!.

No, at the moment, myxwiki.org doesn't offer an open source server. We may add 
one in the future though but no promise nor deadline.

Thanks
-Vincent

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

[xwiki-users] [myxwiki] new wiki request

2012-12-02 Thread Patrice Gahide 
I forgot the other informations. Here they are:

User name on myxwiki.org: Patrice
Desired server name: marceldhot

Sorry for that.


Hi,
>
> We would like to setup a wiki for the parent committee here in our school
> (north of France). XWiki seems to offer every functionalities we need (eg.
> strong collaboration, calendar...) and a strong community support. We can't
> afford a paid hosting, we hope to get a nice room in your farm. Thanks a
> lot for reading.
>


-- 
Patrice Gahide
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

[xwiki-users] [myxwiki] new wiki request

2012-12-02 Thread Patrice Gahide 
Hi,

We would like to setup a wiki for the parent committee here in our school
(north of France). XWiki seems to offer every functionalities we need (eg.
strong collaboration, calendar...) and a strong community support. We can't
afford a paid hosting, we hope to get a nice room in your farm. Thanks a
lot for reading.

-- 
Patrice Gahide
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

[xwiki-users] problem with openoffice connection

2012-12-02 Thread Дмитрий Федин 
Hello!

Do I have the ability to connect openoffice server to my xwiki on MYXWIKIfarm 
and haw I can do it?
At the preference page writen, that this setting is installed at  
xwiki.properties at main wiki!.

Thank You!
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

[xwiki-users] problem with openoffice connection

2012-12-02 Thread Дмитрий Федин 
Hello!

Do I have the ability to connect openoffice server to my xwiki on MYXWIKIfarm 
and haw I can do it?
At the preference page writen, that this setting is installed at  
xwiki.properties at main wiki!.

Thank You!
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

[xwiki-users] problem with openoffice connection

2012-12-02 Thread Дмитрий Федин 
Hello!

Do I have the ability to connect openoffice server to my xwiki on MYXWIKIfarm 
and haw I can do it?
At the preference page writen, that this setting is installed at  
xwiki.properties at main wiki!.

Thank You!
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

[xwiki-users] (no subject)

2012-12-02 Thread Дмитрий Федин 
Hello!

Do I have the ability to connect openoffice server to my xwiki on MYXWIKIfarm 
and haw I can do it?
At the preference page writen, that this setting is installed at  
xwiki.properties at main wiki!.

Thank You!
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users