[ic] [loop-code] interpolation = security risk?

Grant emailgrant at gmail.com
Wed Oct 22 22:50:23 UTC 2014


Does this behavior seem like an unnecessary security risk to anyone else?

[tmpn test1]"[tmpn test2]yes[/tmpn][scratch test2]"[/tmpn]
[loop list=|[scratch test1]| quoted=1]
    [loop-code]
[/loop]

[loop-code] is interpolated so "yes" is printed. [loop search=...]
does not behave this way, only [loop list=...].  This strikes me as
both dangerous and inconsistent.

- Grant



More information about the interchange-users mailing list