Package: diogenes
Version: 0.9.15-1
Severity: important

If an invalid template is uploaded (for instance, one containing inline
stylesheets) which happens to be the template which is used for a barrel's
administrative interface, smarty will constantly bomb and not allow the
admin to fix the mistake.

Diogenes either needs to fall back to a "known good" or "rescue" template in
the event of a template failure, or thoroughly check a template before
allowing it to be used -- *especially* if that template is going to be used
for the admin interface.

The ridiculousness of a templating engine which barfs on a commonly used
character is a matter for another time.

- Matt


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to