Forum OpenACS Q&A: Response to Homepage Module Security

Collapse
Posted by Vinod Kurup on
Uploaded files aren't sourced - they're served as "text/plain" (or whatever ns_guesstype returns for them). I just tested a .tcl and a .adp file and both just show the code to the user.