CMS_selflinks in News module

For questions and problems with the CMS core. This board is NOT for any 3rd party modules, addons, PHP scripts or anything NOT distributed with the CMS made simple package itself.
Post Reply
User avatar
Jo Morg
Dev Team Member
Dev Team Member
Posts: 1973
Joined: Mon Jan 29, 2007 4:47 pm

Re: CMS_selflinks in News module

Post by Jo Morg »

viewtopic.php?f=28&t=75428
"There are 10 types of people in this world, those who understand binary... and those who don't."
* by the way: English is NOT my native language (sorry for any mistakes...).
Code of Condut | CMSMS Docs | Help Support CMSMS
My developer Page on the Forge
GeekMoot 2015 in Ghent, Belgium: I was there!
GeekMoot 2016 in Leicester, UK: I was there!
DevMoot 2023 in Cynwyd, Wales: I was there!
Top
User avatar
DIGI3
Dev Team Member
Dev Team Member
Posts: 1801
Joined: Wed Feb 25, 2009 4:25 am

Re: CMS_selflinks in News module

Post by DIGI3 »

It's for security, as site owners may give users that aren't 100% trusted the ability to post news articles, but not the ability to include Smarty. By requiring the use of eval, it means "I know what I'm doing, and trust the news editors to use Smarty".
Not getting the answer you need? CMSMS support options
Top
User avatar
DIGI3
Dev Team Member
Dev Team Member
Posts: 1801
Joined: Wed Feb 25, 2009 4:25 am

Re: CMS_selflinks in News module

Post by DIGI3 »

I think the choice was made in reaction to a vulnerability. It's documented in the changelog, but we're going to add a comment in the default templates too, like how it is with CGBlog (a fork of the News module).
Not getting the answer you need? CMSMS support options
Top
Post Reply

Return to “CMSMS Core”