1.1 --- a/actions/SendMessage.py Sat Jun 08 01:26:43 2013 +0200
1.2 +++ b/actions/SendMessage.py Thu Jun 13 18:51:07 2013 +0200
1.3 @@ -230,7 +230,7 @@
1.4 sendMessage(message, parameters["url"])
1.5
1.6 except MoinMessageError, exc:
1.7 - return 0, "%s: %s" % (_("The message could not be prepared and sent:"), exc)
1.8 + return 0, "%s: %s" % (_("The message could not be prepared and sent"), exc)
1.9
1.10 # Or queue the message on the specified page.
1.11
1.12 @@ -307,6 +307,14 @@
1.13 """
1.14
1.15 script = request.getScriptname()
1.16 +
1.17 + # Normalise the URL.
1.18 +
1.19 + if not script.endswith("/"):
1.20 + script += "/"
1.21 +
1.22 + # Reject URLs outside the wiki.
1.23 +
1.24 if not url.startswith(script):
1.25 return None
1.26