Enabling Nested Scripts

I stumbled upon some documentation on the xwiki site that says if you can in fact enable nested scripts:

" Nested scripts present a serious security risk, because they can be used to bypass security checks. We strongly advise to write your scripts so that the data is passed through variables. If you really need the old behavior, you can remove NestedScriptMacroValidator from components.txt in xwiki-rendering-macro-script component."

from:

https://extensions.xwiki.org/xwiki/bin/view/Extension/Script%20Macro#HNestedscripts

I could not find a “components.txt” file; the only reference I could discover was in the github for xwiki

Is the nested script validator still something you can disable? Or is this an outdated post?

Thanks.

1 post - 1 participant

Read full topic