Sign in Register
Go to solution
Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Damien (Slipoch) 62 posts 346 karma points
    Nov 29, 2017 @ 01:27
    Damien (Slipoch)
    0

    Possible Security Issue - Templates accessible from root

    Templates, (partial) views and macros
    Umbraco 7

    I have noticed that all templates are accessible from the root of the website.

    Ie: I have a template that is used in my menu called chickens, it should only be called from the location http://website.com/menuoption1/chicken

    http://website.com/chicken will also run that template or any other template I have created.

    This is a worrying development. If anyone could shed some light on it as to why it should happen or if it is a bug etc.

    Copy Link
  • Matt Darby 28 posts 391 karma points c-trib
    Nov 29, 2017 @ 03:58
    Matt Darby
    100

    Hi Damien,

    That's because of the Alt Template feature, more info here.

    Check out the comments in this discussion. Removing the following line from 404handlers.configshould disable it.

    <notFound assembly="umbraco" type="SearchForTemplate"/>
    Copy Link
  • Damien (Slipoch) 62 posts 346 karma points
    Nov 29, 2017 @ 04:33
    Damien (Slipoch)
    0

    Thanks, Matt.

    Copy Link
Please Sign in or register to post replies

Write your reply to:

Draft