Edgewall Software

Ticket #7768 (new defect)

Opened 2 months ago

add_script & add_stylesheet don't support external scripts

Reported by: martin@… Owned by:
Priority: normal Milestone:
Component: general Version:
Severity: normal Keywords:
Cc:

Description

Not sure if this was indented as a security feature, but:

The add_script from trac.web.chrome doesn't support external script URLs, i.e. one which start with 'http://'. At the moment the full URL is appended to the chrome path resulting in a dysfunctional script tag.

The same should be true for add_stylesheet.

If this is indented as a security feature, then be warned that it is easily overcome by just coping and changing the add_script source code, like I did in my GoogleMapMacro, where I have to load the external Google Map API JavaScript file.

Attachments

Add/Change #7768 (add_script & add_stylesheet don't support external scripts)

Author



Change Properties
<Author field>
Action
as new
as The resolution will be set. Next status will be 'closed'
to The owner will change from (none). Next status will be 'new'
The owner will change from (none) to anonymous. Next status will be 'assigned'
 
Note: See TracTickets for help on using tickets.