> A question: are you wanting users to be able to supply their > own templates for > the look and feel?
Yes, it is mostly for look and feel, but would also like to allow users pretty well totally control on layout and the like. Planning on using CSS and might need to just draw the line there, and not allowing full template control. Looks like TT3 might be a good option. Perhaps phase two on my project will be hitting about the same time. Good old phase two :) Another option is to have a template builder, which uses a home grown intermediate tagging language. Then I parse out any tt tags and change the tags from the intermediate language that are left, over to tt. Hope that makes sense. Thanks, Earl > -----Original Message----- > From: Jeff Anderson [mailto:[EMAIL PROTECTED] > Sent: Wednesday, February 11, 2004 6:48 AM > To: [EMAIL PROTECTED] > Subject: Re: [Templates] safely parsing user provided templates > > > Not the expected answer, especially at this forum ... but > HTML::Template does > not suffer from this symptom. It doesn't really have many > features at all, > however ... just loops, conditionals, includes, and variable > interpolation. > > If so, you might be able to allow them to > supply their own > CSS stylesheet instead. Go take a look at > > http://www.csszengarden.com > > to see what i mean. > > jeffa > > --- "Cahill, Earl" <[EMAIL PROTECTED]> wrote: > > Howdy, > > > > I am working a blogging utility that needs to be templated, > and have been > > pondering allowing users to use their own templates. The > user's templates > > would exist in their own directory, but they won't be > chrooted there. I > > know I shouldn't turn on EVAL_PERL, or ABSOLUTE, and I > should have RELATIVE > > turned on. Hoping that users don't have access to change > those settings > > from a page being evaluated. > > > > Just wondering about the security implications, if there > other things I > > should do, and if there are sites out there that process > pages provided by > > untrusted users. > > > > Thanks, > > Earl > > > > _______________________________________________ > > templates mailing list > > [EMAIL PROTECTED] > > http://lists.template-toolkit.org/mailman/listinfo/templates > > > __________________________________ > Do you Yahoo!? > Yahoo! Finance: Get your refund fast by filing online. > http://taxes.yahoo.com/filing.html > > _______________________________________________ > templates mailing list > [EMAIL PROTECTED] > http://lists.template-toolkit.org/mailman/listinfo/templates > _______________________________________________ templates mailing list [EMAIL PROTECTED] http://lists.template-toolkit.org/mailman/listinfo/templates
