[Moin-user] formatter to javascript?

Radomir Dopieralski moinmoin at sheep.art.pl
Tue Jan 11 15:41:58 EST 2011


On Tue, Jan 11, 2011 at 9:36 PM, Joshua Tacoma <joshua.tacoma at gmail.com> wrote:
> Hey all, I'm interested in writing a formatter that would produce a
> javascript file or module, executable in the browser, based on snippets and
> tables in the source.  It could turn a wiki into a literate javascript
> development environment.  So I've got some questions:
> - Has this already been done?
> - Are the security issues so obviously and deeply hairy that no one in their
> right mind would do such a thing?
Yes, there are security issues. Basically, the javascript on the page
has access to the cookie (and thus the session) of the user who is
browsing the page, and can act in that user's name on the wiki, doing
anything the user can do.

[...]
-- 
Radomir Dopieralski, http://sheep.art.pl




More information about the Moin-user mailing list