Item1929: ChecklistTablePlugin: use ICONURLPATH instead of ICONURL for SafeWikiPlugin compatibility
Priority: Normal
Current State: New
Released In:
Target Release: n/a
SafeWikiPlugin reduces XSS vulnerabilities by stripping out resources (images, js, etc) that are loaded from absolute URLs with a protocol://hostname part.
So convert
%ICONURL%
to
%ICONURLPATH%
.
This should be a minor change, I can't think of why it would break anything... this patch is against the latest version retrieved/installed with the configure script on Foswiki 1.0.6.
--
PaulHarvey - 17 Aug 2009