Description
All mail sent to subscribers contains a URL to the modified page. That URL appears to be generated by the URL the editor chooses to access the page by.
I believe that all emails should be sent with a link using the same URL defined, by the administrator.
Steps to reproduce
- Subscribe to a page using an account with the email set.
- Log out of the wiki and navigate to the page using ip address or adding something like
192.0.32.10 nasty.example.com
to your /etc/hosts file and browsing to http://nasty.example.com
Edit the page & save.
Observe an email in your inbox containing a link to something like http://nasty.example.com/wiki/Page?action=diff&rev1=1&rev2=2
Example
Component selection
- Please edit me!
Details
MoinMoin Version |
1.9.3 |
OS and Version |
Windows Server 2003 |
Python Version |
Python 2.6.2 |
Server Setup |
|
Server Details |
|
Language you are using the wiki in (set in the browser/UserPreferences) |
English |
Workaround
Discussion
Please update! 1.8.5 has security issues, for details see SecurityFixes.
Hmm, where does the adminstrator define the URL? It is on the server or?
Besides an invalid hosts file we should take in account that wikis could have more than one adress, e.g. wiki.python.de and wiki.python-forum.de. To solve this we probably need to save the accessurl in the session file or the user settings.
- This was originally posted while using 1.8.5. I have upgraded since and believe the bug is still there. That is one possibility on how to 'fix' it, I guess. Seems a bit of an effort though. In the example you've posted above, couldn't the wiki administrator just decide on a default?
Plan
- Priority:
- Assigned to:
- Status: