Page 1 of 1
Re: CMS_selflinks in News module
Posted: Fri Sep 16, 2016 7:09 am
by Jo Morg
Re: CMS_selflinks in News module
Posted: Fri Sep 16, 2016 1:46 pm
by DIGI3
It's for security, as site owners may give users that aren't 100% trusted the ability to post news articles, but not the ability to include Smarty. By requiring the use of eval, it means "I know what I'm doing, and trust the news editors to use Smarty".
Re: CMS_selflinks in News module
Posted: Tue Sep 20, 2016 2:29 pm
by DIGI3
I think the choice was made in reaction to a vulnerability. It's documented in the changelog, but we're going to add a comment in the default templates too, like how it is with CGBlog (a fork of the News module).