Full whitelist access granted to any widget built from a template
-----------------------------------------------------------------
Key: WOOKIE-300
URL: https://issues.apache.org/jira/browse/WOOKIE-300
Project: Wookie
Issue Type: Bug
Components: Template
Affects Versions: 0.9.2
Reporter: Ross Gardler
Priority: Blocker
Fix For: 0.9.2
At present the config.xml has a hard coded whitelist of '*'' - not overly
secure!
This should be parameterised and limited to the a sensible setting
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
