Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Damien (Slipoch) 62 posts 346 karma points
    Nov 29, 2017 @ 01:27
    Damien (Slipoch)
    0

    Possible Security Issue - Templates accessible from root

    I have noticed that all templates are accessible from the root of the website.

    Ie: I have a template that is used in my menu called chickens, it should only be called from the location http://website.com/menuoption1/chicken

    http://website.com/chicken will also run that template or any other template I have created.

    This is a worrying development. If anyone could shed some light on it as to why it should happen or if it is a bug etc.

  • Matt Darby 28 posts 391 karma points c-trib
    Nov 29, 2017 @ 03:58
    Matt Darby
    100

    Hi Damien,

    That's because of the Alt Template feature, more info here.

    Check out the comments in this discussion. Removing the following line from 404handlers.configshould disable it.

    <notFound assembly="umbraco" type="SearchForTemplate"/>
    
  • Damien (Slipoch) 62 posts 346 karma points
    Nov 29, 2017 @ 04:33
    Damien (Slipoch)
    0

    Thanks, Matt.

  • This forum is in read-only mode while we transition to the new forum.

    You can continue this topic on the new forum by tapping the "Continue discussion" link below.

Please Sign in or register to post replies