Post by coldstone on Dec 10, 2006 23:36:37 GMT -5
Versions Affected: GreyMatter 1.6.1
Severity: Moderate
Issue Description: Only GM installations with multiple censored words are affected.The code that examines 'censored word list' depends on each word being seperated by the characters '|*|' but as of version 1.6.1 is seperated by the newline character '\n'.
This defect was introduced by the assumption that whenever a config parameter is retrieved from the file, that the internal newline ('|*|') was replaced with the regular newline, however, for the censored words, the switch was made later.
Resolution: This is an easy defect to fix and requires that two lines of code be changed in the gm-library.cgi file. Lines 1033, 1283, and 3406.
From:
To:
This will be fixed in GM 1.7.1
Severity: Moderate
Issue Description: Only GM installations with multiple censored words are affected.The code that examines 'censored word list' depends on each word being seperated by the characters '|*|' but as of version 1.6.1 is seperated by the newline character '\n'.
This defect was introduced by the assumption that whenever a config parameter is retrieved from the file, that the internal newline ('|*|') was replaced with the regular newline, however, for the censored words, the switch was made later.
Resolution: This is an easy defect to fix and requires that two lines of code be changed in the gm-library.cgi file. Lines 1033, 1283, and 3406.
From:
@censoredterms = split(/\|\*\|/, $censorlist);To:
@censoredterms = split('\\n', $censorlist);This will be fixed in GM 1.7.1