Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error 403 on saving markdown page that contains the String /etc/ #111

Open
sttzr opened this issue Jun 6, 2020 · 0 comments
Open

Error 403 on saving markdown page that contains the String /etc/ #111

sttzr opened this issue Jun 6, 2020 · 0 comments

Comments

@sttzr
Copy link

sttzr commented Jun 6, 2020

I'm currently trying out Wikitten as a personal markdown-Wiki and like it very much.
It's just that I always got an Error 403 on some .md-Pages when I tried to save changes. Now I narrowed it down a bit and found out the following:

  • It fails as soon as I type the String /etc/ somewhere in the document.
  • It doesn't make any difference if it's inside a fenced code block using ``` or not.
  • Markdown pages that I upload manually using ftp are rendered correctly even if they contain the /etc/-String.
  • It's only when I click on "Toggle Source" and then clicking "Save Changes", that the error occurs. When removing just one character from the string it saves successfully.
  • In my Developer-ToolsI can see a POST-request to /?a=edit beeing made that contains the markdown content failing with Error 403.
  • Same thing in Firefox or Chromium.
  • My server settings are php 7.4.6 served as FPM via Apache.

As far as I know it should be perfectly valid to use the string /etc/ in markdown syntax without further character escaping. So I assume that there is a bug in Wikitten.

Can anyone reproduce this issue?

  1. Create a new page test.md, as content type blablabla and "Save Changes"
  2. Now edit the page and add /etc/ to the end.
  3. Do you get an Error 403?

Thanks a lot!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant