View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0027383 | mantisbt | administration | public | 2020-10-08 12:07 | 2021-01-16 18:53 |
Reporter | dregad | Assigned To | dregad | ||
Priority | normal | Severity | minor | Reproducibility | N/A |
Status | assigned | Resolution | open | ||
Target Version | 2.26.0 | ||||
Summary | 0027383: Move 'test_langs.php' script to admin checks | ||||
Description | Following discussion in 0027362, we can get rid of the script while keeping the functionality to help admins check for 3rd-party plugins language files by moving the logic into the Admin checks. | ||||
Tags | No tags attached. | ||||
The script relies on eval() to check the language scripts' syntax. I'm concerned with this, as this could lead to execution of potentially harmful code (scenario where admin installs a "trojan horse" 3rd-party plugin). |
|