[interchange-cvs] interchange - jon modified dist/foundation/special_pages/missing.html

interchange-cvs at icdevgroup.org interchange-cvs at icdevgroup.org
Thu Apr 8 15:51:05 EDT 2004


User:      jon
Date:      2004-04-08 19:51:04 GMT
Modified:  dist/foundation/special_pages missing.html
Log:
Use new MV_SUBJECT global variable to check whether error occurred on an
admin page.

Don't display name of nonexistent page to user to avoid any future
security vulnerability.

Revision  Changes    Path
2.4       +5 -6      interchange/dist/foundation/special_pages/missing.html


rev 2.4, prev_rev 2.3
Index: missing.html
===================================================================
RCS file: /var/cvs/interchange/dist/foundation/special_pages/missing.html,v
retrieving revision 2.3
retrieving revision 2.4
diff -u -u -r2.3 -r2.4
--- missing.html	7 Apr 2004 02:19:45 -0000	2.3
+++ missing.html	8 Apr 2004 19:51:04 -0000	2.4
@@ -1,11 +1,10 @@
-[if type=explicit compare=`q{[subject]} =~ m{^admin/}` ]
-[set ui_error]<h2>[msg arg.0="[subject]"]Sorry, the page (%s) was not found[/msg]</h2>[/set]
+[if global MV_SUBJECT =~ m{^admin/}]
+[set ui_error][L]Sorry, page not found[/L][/set]
 [include admin/error.html]
 [else]
 
-[tmp page_title]
-[msg arg.0="[subject]"]Sorry, the page (%s) was not found[/msg]
-[/tmp]
+[tmpn page_title][L]Sorry, page not found[/L][/tmpn]
+
 @_NOLEFT_TOP_@
 
 <p>&nbsp;</p>
@@ -13,7 +12,7 @@
 <H1>[scratch page_title]</H1>
 
 <p>
-[msg arg.0="[subject]" arg.1="[page index]" arg.2="</a>"]The requested page (%s) was not found. You can %sreturn to browsing our catalog%s, if you wish.[/msg]
+[msg arg.0="[page index]" arg.1="</a>"]The requested page was not found. You can %sreturn to browsing our catalog%s, if you wish.[/msg]
 </p>
 
 @_NOLEFT_BOTTOM_@








More information about the interchange-cvs mailing list