Skip to content

Commit 6497d3c

Browse files
bdukesr90727
bdukes
and
r90727
committed
Deny anonymous users access to CKE endpoints
Co-authored-by: r90727 <[email protected]>
1 parent 437a248 commit 6497d3c

File tree

1 file changed

+126
-104
lines changed

1 file changed

+126
-104
lines changed

‎DNN Platform/Providers/HtmlEditorProviders/DNNConnect.CKE/DNNConnect.CKEditorProvider.dnn‎

Lines changed: 126 additions & 104 deletions
Original file line numberDiff line numberDiff line change
@@ -1,119 +1,141 @@
11
<dotnetnuke type="Package" version="5.0">
2-
<packages><package name="DNNConnect.CKEditorProvider" type="Provider" version="10.01.00">
3-
<friendlyName>CKEditor Provider</friendlyName>
4-
<description>CKEditor Provider for DNN</description>
5-
<iconFile>~/Providers/HtmlEditorProviders/DNNConnect.CKE/LogoCKEditor.png</iconFile>
6-
<azureCompatible>true</azureCompatible>
7-
<owner>
8-
<name>.NET Foundation and Contributors</name>
9-
<organization>DNN Community</organization>
10-
<url>https://dnncommunity.org</url>
11-
<email>[email protected]</email>
12-
</owner>
13-
<license src="license.txt" />
14-
<releaseNotes src="releaseNotes.txt" />
15-
<components>
16-
<component type="Assembly">
17-
<assemblies>
18-
<assembly>
19-
<path>bin</path>
20-
<name>DNNConnect.CKEditorProvider.dll</name>
21-
</assembly>
22-
</assemblies>
23-
</component>
24-
<component type="ResourceFile">
25-
<resourceFiles>
26-
<basePath>Providers\HtmlEditorProviders\DNNConnect.CKE</basePath>
27-
<resourceFile>
28-
<name>Resources.zip</name>
29-
</resourceFile>
30-
</resourceFiles>
31-
</component>
32-
<component type="Script">
33-
<scripts>
34-
<basePath>Providers\HtmlEditorProviders\DNNConnect.CKE\</basePath>
35-
<script type="Install">
36-
<path>Install</path>
37-
<name>01.00.00.SqlDataProvider</name>
38-
<version>01.00.00</version>
39-
</script>
40-
<script type="Install">
41-
<path>Install</path>
42-
<name>01.00.02.SqlDataProvider</name>
43-
<version>01.00.02</version>
44-
</script>
45-
<script type="UnInstall">
46-
<path>Install</path>
47-
<name>Uninstall.SqlDataProvider</name>
48-
</script>
49-
</scripts>
50-
</component>
51-
<component type="File">
52-
<files>
53-
<basePath>Portals\_default</basePath>
54-
<file>
55-
<path>Install</path>
56-
<name>Dnn.CKEditorDefaultSettings.xml</name>
57-
</file>
58-
<file>
59-
<path>Install</path>
60-
<name>Dnn.CKToolbarButtons.xml</name>
61-
</file>
62-
<file>
63-
<path>Install</path>
64-
<name>Dnn.CKToolbarSets.xml</name>
65-
</file>
66-
</files>
67-
</component>
68-
<component type="File">
69-
<files>
70-
<basePath>Providers\HtmlEditorProviders\DNNConnect.CKE</basePath>
71-
<file>
72-
<name>LogoCKEditor.png</name>
73-
<sourceFileName>LogoCKEditor.png</sourceFileName>
74-
</file>
75-
</files>
76-
</component>
77-
<component type="Config">
78-
<config>
79-
<configFile>web.config</configFile>
80-
<install>
81-
<configuration>
82-
<nodes>
83-
<node path="/configuration/dotnetnuke/htmlEditor[@defaultProvider='' or @defaultProvider='DotNetNuke.RadEditorProvider']"
2+
<packages>
3+
<package name="DNNConnect.CKEditorProvider" type="Provider" version="10.01.00">
4+
<friendlyName>CKEditor Provider</friendlyName>
5+
<description>CKEditor Provider for DNN</description>
6+
<iconFile>~/Providers/HtmlEditorProviders/DNNConnect.CKE/LogoCKEditor.png</iconFile>
7+
<azureCompatible>true</azureCompatible>
8+
<owner>
9+
<name>.NET Foundation and Contributors</name>
10+
<organization>DNN Community</organization>
11+
<url>https://dnncommunity.org</url>
12+
<email>[email protected]</email>
13+
</owner>
14+
<license src="license.txt" />
15+
<releaseNotes src="releaseNotes.txt" />
16+
<components>
17+
<component type="Assembly">
18+
<assemblies>
19+
<assembly>
20+
<path>bin</path>
21+
<name>DNNConnect.CKEditorProvider.dll</name>
22+
</assembly>
23+
</assemblies>
24+
</component>
25+
<component type="ResourceFile">
26+
<resourceFiles>
27+
<basePath>Providers\HtmlEditorProviders\DNNConnect.CKE</basePath>
28+
<resourceFile>
29+
<name>Resources.zip</name>
30+
</resourceFile>
31+
</resourceFiles>
32+
</component>
33+
<component type="Script">
34+
<scripts>
35+
<basePath>Providers\HtmlEditorProviders\DNNConnect.CKE\</basePath>
36+
<script type="Install">
37+
<path>Install</path>
38+
<name>01.00.00.SqlDataProvider</name>
39+
<version>01.00.00</version>
40+
</script>
41+
<script type="Install">
42+
<path>Install</path>
43+
<name>01.00.02.SqlDataProvider</name>
44+
<version>01.00.02</version>
45+
</script>
46+
<script type="UnInstall">
47+
<path>Install</path>
48+
<name>Uninstall.SqlDataProvider</name>
49+
</script>
50+
</scripts>
51+
</component>
52+
<component type="File">
53+
<files>
54+
<basePath>Portals\_default</basePath>
55+
<file>
56+
<path>Install</path>
57+
<name>Dnn.CKEditorDefaultSettings.xml</name>
58+
</file>
59+
<file>
60+
<path>Install</path>
61+
<name>Dnn.CKToolbarButtons.xml</name>
62+
</file>
63+
<file>
64+
<path>Install</path>
65+
<name>Dnn.CKToolbarSets.xml</name>
66+
</file>
67+
</files>
68+
</component>
69+
<component type="File">
70+
<files>
71+
<basePath>Providers\HtmlEditorProviders\DNNConnect.CKE</basePath>
72+
<file>
73+
<name>LogoCKEditor.png</name>
74+
<sourceFileName>LogoCKEditor.png</sourceFileName>
75+
</file>
76+
</files>
77+
</component>
78+
<component type="Config">
79+
<config>
80+
<configFile>web.config</configFile>
81+
<install>
82+
<configuration>
83+
<nodes>
84+
<node path="/configuration/dotnetnuke/htmlEditor[@defaultProvider='' or @defaultProvider='DotNetNuke.RadEditorProvider']"
8485
action="updateattribute"
8586
name="defaultProvider"
8687
value="DNNConnect.CKE" />
87-
<node path="/configuration/dotnetnuke/htmlEditor/providers"
88+
<node path="/configuration/dotnetnuke/htmlEditor/providers"
8889
action="update"
8990
key="name"
9091
collision="ignore">
91-
<add name="DNNConnect.CKE"
92+
<add name="DNNConnect.CKE"
9293
type="DNNConnect.CKEditorProvider.CKHtmlEditorProvider, DNNConnect.CKEditorProvider"
9394
providerPath="~/Providers/HtmlEditorProviders/DNNConnect.CKE/"
9495
settingsControlPath="~/Providers/HtmlEditorProviders/DNNConnect.CKE/Module/EditorConfigManager.ascx" />
95-
</node>
96-
</nodes>
97-
</configuration>
98-
</install>
99-
<uninstall>
100-
<configuration>
101-
<nodes>
102-
<node path="/configuration/dotnetnuke/htmlEditor[@defaultProvider='DNNConnect.CKE']"
96+
</node>
97+
<node path="/configuration" action="update" key="path" collision="ignore">
98+
<location path="Providers/HtmlEditorProviders/DNNConnect.CKE/Browser/FileUploader.ashx">
99+
<system.web>
100+
<authorization>
101+
<deny users="?" />
102+
<!-- Deny anonymous users -->
103+
</authorization>
104+
</system.web>
105+
</location>
106+
<location path="Providers/HtmlEditorProviders/DNNConnect.CKE/Browser/Browser.aspx">
107+
<system.web>
108+
<authorization>
109+
<deny users="?" />
110+
<!-- Deny anonymous users -->
111+
</authorization>
112+
</system.web>
113+
</location>
114+
</node>
115+
</nodes>
116+
</configuration>
117+
</install>
118+
<uninstall>
119+
<configuration>
120+
<nodes>
121+
<node path="/configuration/dotnetnuke/htmlEditor[@defaultProvider='DNNConnect.CKE']"
103122
action="updateattribute"
104123
name="defaultProvider"
105124
value="DotNetNuke.RadEditorProvider" />
106-
<node path="/configuration/dotnetnuke/htmlEditor/providers/add[@name='DNNConnect.CKE']"
125+
<node path="/configuration/dotnetnuke/htmlEditor/providers/add[@name='DNNConnect.CKE']"
107126
action="remove" />
108-
</nodes>
109-
</configuration>
110-
</uninstall>
111-
</config>
112-
</component>
113-
<component type="Cleanup"
114-
glob="Providers/HtmlEditorProviders/DNNConnect.CKE/js/ckeditor/4.15.1/**/*">
115-
</component>
116-
</components>
117-
</package>
118-
</packages>
127+
<node path="/configuration/location[@path='Providers/HtmlEditorProviders/DNNConnect.CKE/Browser/FileUploader.ashx']"
128+
action="remove" />
129+
<node path="/configuration/location[@path='Providers/HtmlEditorProviders/DNNConnect.CKE/Browser/Browser.aspx']"
130+
action="remove" />
131+
</nodes>
132+
</configuration>
133+
</uninstall>
134+
</config>
135+
</component>
136+
<component type="Cleanup"
137+
glob="Providers/HtmlEditorProviders/DNNConnect.CKE/js/ckeditor/4.15.1/**/*" />
138+
</components>
139+
</package>
140+
</packages>
119141
</dotnetnuke>

0 commit comments

Comments
 (0)