X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=sys%2Fmacros%2FCgiVar.py;h=b29f5d489e6c7a6f15c315c9294351faec6fb993;hb=fb21625644f08b6996723bd6cdac1e4eee88eecc;hp=c2ba707f1eca16a60ee7ab728a7660ff528e24f4;hpb=9b09bf07ceaaff512d38fa15313d6b683efbf044;p=wiki.git diff --git a/sys/macros/CgiVar.py b/sys/macros/CgiVar.py index c2ba707..b29f5d4 100644 --- a/sys/macros/CgiVar.py +++ b/sys/macros/CgiVar.py @@ -1,6 +1,10 @@ #acl bernie:read,write All:read +#FIXME: couldn't we just return any env variable? +# Would there be any security issues? def _macro_CgiVar(*args, **kvargs): + if args[1].startswith('HTTP_'): + return os.environ.get(args[1], '') return { 'REMOTE_USER': remote_user(), 'REMOTE_HOST': get_hostname(remote_host()),