Forum OpenACS Q&A: Homepage Module Security

Collapse
1: Homepage Module Security
Posted by Matthew Soldo on 02/05/02 08:04 PM
Does the homepage module (OpenACS 3.X) have security features that
prevents a macilious user from uploading and executing .tcl
files? .adp files?

Thanks

Collapse
2: Response to Homepage Module Security (response to 1)
Posted by Vinod Kurup on 02/05/02 09:31 PM
Uploaded files aren't sourced - they're served as "text/plain" (or whatever ns_guesstype returns for them). I just tested a .tcl and a .adp file and both just show the code to the user.