From a32d786b14049f3246d401a44b8f4fb19aa06c23 Mon Sep 17 00:00:00 2001 From: Henrik Levkowetz Date: Wed, 25 May 2016 21:01:40 +0000 Subject: [PATCH] Added some notes. - Legacy-Id: 11245 --- PLAN | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/PLAN b/PLAN index 1128f10c3..c8e837087 100644 --- a/PLAN +++ b/PLAN @@ -45,3 +45,11 @@ Planned work in rough order * Consistency fix: in settings.py, name directory settings consistently with ..._DIR; reserving ..._PATH for settings with PATH semantics (':'-separated lists of directories) + +* For documents with Yang modules, add links to the extracted modules (possibly in + multiple formats -- pyang can generate a large number of alternative formats) + +* When we get to the point where we can produce pdf from xml+media, remove the + pdf upload possibility -- it's a definite attack vector. Possibly start scanning + pdf files for /JS and /JavaScript (and workarounds to hide Javascript) +