wikimedia/mediawiki-extensions-RSS
1
0
Fork 0
mirror of https://gerrit.wikimedia.org/r/mediawiki/extensions/RSS synced 2024-11-12 09:23:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

* (bug 27768) Make it possible to restrict use of RSS tags

Browse source 
Added URL whitelist to configuration

If there are items in the array, and the used URL isn't in the array, it will not be allowed
This commit is contained in:
Sam Reed 2011-07-09 01:59:02 +00:00
parent fc149dce94
commit bd5d63fcf0
3 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
RSS.i18n.php
View file

@ -19,6 +19,7 @@ $messages['en'] = array(
'rss-invalid-url' => 'Not a valid URL: $1',
'rss-parse-error' => 'Error parsing XML for RSS',
'rss-ns-permission' => 'RSS is not allowed in this namespace',
'rss-url-permission' => 'This URL is not allowed to be included',
'rss-item' => '{{$1 | title = {{{title}}} | link = {{{link}}} | date = {{{date}}} | author = {{{author}}} }}',
);

4
RSS.php
View file

@ -59,8 +59,10 @@ $wgRSSNamespaces = null; // Ignore the RSS tag in all but the namespaces list
// null (the default) means the <rss> tag can be used
// anywhere.
$wgRSSAllowedFeeds = array();
// Agent to use for fetching feeds
$wgRSSUserAgent = 'MediaWikiRSS/0.02 (+http://www.mediawiki.org/wiki/Extension:RSS) / MediaWiki RSS extension';
// Proxy server to use for fetching feeds
$wgRSSProxy = false;
$wgRSSProxy = false;

6
RSSHooks.php
View file

@ -20,7 +20,7 @@ class RSSHooks {
* @param $frame Frame parser context
*/
static function renderRss( $input, $args, $parser, $frame ) {
global $wgRSSCacheAge, $wgRSSCacheCompare, $wgRSSNamespaces;
global $wgRSSCacheAge, $wgRSSCacheCompare, $wgRSSNamespaces, $wgRSSAllowedFeeds;
if ( is_array( $wgRSSNamespaces ) && count( $wgRSSNamespaces ) ) {
$ns = $parser->getTitle()->getNamespace();
@ -31,6 +31,10 @@ class RSSHooks {
}
}
if ( count( $wgRSSAllowedFeeds ) && !in_array( $input, $wgRSSAllowedFeeds ) ) {
return wfMsg( 'rss-url-permission ' );
}
if ( !Http::isValidURI( $input ) ) {
return wfMsg( 'rss-invalid-url', htmlspecialchars( $input ) );
}