December 2012 - xwiki-users@xwiki.org

Re: [xwiki-users] xwiki render cache not working?
by David Delbecq 07 Dec '12

07 Dec '12

> You can also use cache macro (see > http://extensions.xwiki.org/xwiki/bin/view/Extension/Cache+Macro) to choose > different timing for each contents. For what i read, it operates at a differente level, i caches the XDOM, not the rendered content. I am pretty sure XDOM uses more space in memory that a simple String, you still have the overhead of rendering operation and you have to manually manage your cache key, which is far mor cumbersome thant saying xwiki "hey, cache this page for 5 minutes, ok?) Moreover, documentation suggest to avoid haveing different timeToLive on different pages, because that's as much threads :s

3 6

[xwiki-users] Livetable problem
by Desire_cat 07 Dec '12

07 Dec '12

Hi Everyone, I am new to Xwiki and I am stuck with a little problem and I was wondering if any of you lovely people could help? What I am trying to do is generate a Livetable similar to the documents macro but only showing a group of selected tags. Is this possible? and if so how would I go about doing this? Thanks -- View this message in context: http://xwiki.475771.n2.nabble.com/Livetable-problem-tp7582689.html Sent from the XWiki- Users mailing list archive at Nabble.com.

3 2

[xwiki-users] Javascripted slideshow for home pages
by Gerritjan Koekkoek 07 Dec '12

07 Dec '12

For one translation www.cdlsworld.org?language=nl we've included an iFrame that links to a 'hidden' website that holds a WOWSLIDER based html page. It is heavily javascripted with jQuery. The use of jQuery instead of Protoptype makes it difficult to use the wow slider javascript from within xwiki We're experimenting if we could do this from within XWiki (without the iFrame). The reason being that maintaining the wow slider is a single person task and makes the organization vulnerable if this person leaves. I've noticed you were active developing a carrousel on XWiki. Would it be possible to learn about this and share the approach?

2 1

[xwiki-users] XWiki login timeout
by Hoang Tuan Viet 07 Dec '12

07 Dec '12

Hi all, I am usually out of session when editing XWiki page, after about 2 minutes. I have checked tomcat6's web.xml file: ... </servlet-mapping> <session-config> <session-timeout>30</session-timeout> </session-config> ... as http://www.xwiki.org/xwiki/bin/view/FAQ/How+can+I+change+the+Session+timeout. I also see file web.xml in xwiki/WEB-INF folder. I tried to add above config to this file but no luck. Would you please tell me how to fix this? Regards, -- Viet Hoang

2 2

[xwiki-users] xwiki render cache not working?
by David Delbecq 07 Dec '12

07 Dec '12

Hello, i have a specific wiki page that is quite slow to render because some groovy code and macros in there are quite slow. Fortunately, content does not change often, si i tried to make it faster for user by using cache rendering. Here is what is inside my xwiki.cfg: xwiki.rendering.defaultCacheDuration=3600 And here is my xwiki.properties core.renderingcache.enabled=true core.renderingcache.documents=wiki:.* core.renderingcache.size=200 # Default value is 300 (5 min). # core.renderingcache.duration=300 I have also this inside my page: {{velocity}} $context.setCacheDuration(60) //complex content here that has a custom groovy macro and a velocity include {{/velocity}} {{groovy}} System.out.println("***************************************phone menu not in cache") {{/groovy}} And i see in my log that, everytime, the System.out is executed, meaning the render cache is not used. What's my configuration problem? What did i miss? Note: using xwiki 4.1.2 and the url i try is http://server/xwiki/bin/view/MySpace/MyPage?menu=Test.Menu&xpage=plain Thank you. David Delbecq

3 6

[xwiki-users] How to display a local file
by H.-Dirk Schmitt 06 Dec '12

06 Dec '12

Hi! I'm looking for a receipt to display a local file inside an xwiki page. The use case is that this is an intranet documentation provided by xwiki. Every user in the audience has normally some configuration files in a standardized location. The content may differ between for each user (or concrete his workstation). This is also the reason not to expose the files on a webserver and use the RemoteCode marco. Current solution is to at a link [[ConfigFile>>file:///etc.....]] It would be nicer to display the content inside the xwiki page. Best Regards, H.-Dirk Schmitt -- Signature H.-Dirk Schmitt ------------------------------------------------------------------------ * H.-Dirk Schmitt <http://www.computer42.org>* Dipl.Math. eMail:/dirk.schmitt@computer42.org/ mobile:/+49 177 616 8564/ phone: /+49 2642 99 41 10/ fax: /+49 2642 99 41 15/ Kripper Str. 35, D-53489 Sinzig pgp: http://www.computer42.org/~dirk/OpenPGP-fingerprint.html <http://www.computer42.org/%7Edirk/OpenPGP-fingerprint.html>

5 8

[xwiki-users] Problem accessing sub-wikis
by Trash Mail 06 Dec '12

06 Dec '12

hey guys, i'm using XEM 4.2 and have some sub-wikis set up access rights to main and sub-wikis now when i try to login into my main wiki everything is ok. also if open my sub-wiki from main. BUT if i try to open the sub-wiki directly via url i get an error message and i dont know why :( "Error You are not allowed to view this document or perform this action." maybe i forgot to set some rights but i really cant find a solution myself.. any help is appreciated. regards,

2 3

[xwiki-users] XSS Security Hole, how to post to security@xwiki.org
by Jan-Philip Loos 05 Dec '12

05 Dec '12

Hello, tonight some XWikis Sites were attacked with XSS. One of this sites is our own, which runs 4.2. A wrote the details to security(a)xwiki.org mailing list, but it's rejected by security-owner(a)xwiki.org. According to http://dev.xwiki.org/xwiki/bin/view/Community/MailingLists : "However, anyone can write to these lists to report issues (no subscription needed)." I think I misinterpreted it. How can I post the details on this attack to a non public space? Greetings Jan-Philip Loos -- View this message in context: http://xwiki.475771.n2.nabble.com/XSS-Security-Hole-how-to-post-to-security… Sent from the XWiki- Users mailing list archive at Nabble.com.

3 2

[xwiki-users] Raw source view
by Leen Toelen 04 Dec '12

04 Dec '12

Hi, is it possible to view the raw source (without any html around it) of an xwiki page? Like the viewer=code parameter, but returning the source in plain text. Regards, Leen

2 4

Re: [xwiki-users] Using <textarea> with xwiki: nightmare??
by David Delbecq 03 Dec '12

03 Dec '12

Thanks a lot, it works like a charm. And thanks for the last link too. ----- Mail original ----- De: "Thomas Mortagne" <thomas.mortagne(a)xwiki.com> À: "XWiki Users" <users(a)xwiki.org> Envoyé: Lundi 3 Décembre 2012 09:26:26 Objet: Re: [xwiki-users] Using <textarea> with xwiki: nightmare?? Basically you need to do pretty much what you did with groovy: {{velocity}} #set($test = "**hello**<b>test</b>") {{html clean="false"}} <textarea cols="75" rows="2" name="description">$escapetool.html($test)</textarea> {{/html}} {{/velocity}} Several notes: * xwiki="false" does not exist and wiki="false" is already the default in html macro. See http://extensions.xwiki.org/xwiki/bin/view/Extension/HTML+Macro. * see http://extensions.xwiki.org/xwiki/bin/view/Extension/Velocity+Module#HVeloc… all the velocity tools On Mon, Dec 3, 2012 at 8:52 AM, David Delbecq <david.delbecq(a)meteo.be>wrote: > Hello, > > > i'd like some informations on how to get xwiki + velocity to render > properly a form containing a prefilled <textarea>. I have tried several way > and, in the end, i ended up using a groovy script, which requires > developper priviledge. All other options i tried had issues. Could someone > tell me if there is a way to get it to work with. > > I have a variable X, i want content of X to be html escaped (eg <b> > becomes &ltg;b>) and output in the final document between <textarea> > </textarea> tags. > > So far, i attempted the following > > > {{velocity}} > #set($test = "**hello**<b>test</b>") > {{html clean="false" xwiki="false"}} > <textarea cols="75" rows="2" name="description">$test</textarea> > {{/html}} > {{/velocity}} > > {{velocity xwiki="false"}} > #set($test2 = "**hello2**<b>test</b>") > {{/velocity}} > {{html clean="false" xwiki="false"}}<textarea cols="75" rows="2" > name="description">{{/html}}{{velocity > xwiki="false"}}${test2}{{/velocity}}{{html clean="false" > xwiki="false"}}</textarea>{{/html}} > > > {{velocity xwiki="false"}} > #set($test3 = "**hello3**<b>test</b>") > {{/velocity}} > {{html clean="false" xwiki="false"}}<textarea cols="75" rows="2" > name="description">{{/html}}{{velocity > xwiki="false"}}${test3}{{/velocity}}{{html clean="false" > xwiki="false"}}</textarea>{{/html}} > > > {{groovy}} > test4 = > org.apache.commons.lang.StringEscapeUtils.escapeHtml("**hello4**<b>test</b>"); > {{/groovy}} > {{velocity xwiki="false"}}{{html clean="false" xwiki="false"}}<textarea > cols="75" rows="2" > name="description">${test4}</textarea>{{/html}}{{/velocity}} > > > And got the following renders (html sources) > > > < textarea cols = "75" rows = "2" name = "description" > >**hello**<b>test</b></ textarea > > > < textarea cols = "75" rows = "2" name = "description" > ><strong>hello2</strong><b>test</b></ textarea > > > < textarea cols = "75" rows = "2" name = "description" > ><strong>hello3</strong><b>test</b></ textarea > > > < textarea cols = "75" rows = "2" name = "description" > >**hello4**<b>test</b></ textarea > > As you can see: option 1 left <b></b> tags as is, which can lead to html > injection vulnerability of my form. > option 2 and 3 replaced ** with <strong> which mean we alter user input :/ > option 4 works but requires developper priviledges. :/ > > > David Delbecq > > _______________________________________________ > users mailing list > users(a)xwiki.org > http://lists.xwiki.org/mailman/listinfo/users > -- Thomas Mortagne _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users

1 0