On Wed, Aug 26, 2009 at 3:57 PM, Ulrich Stärk <u...@spielviel.de> wrote:
> I really like to hear what the other devs (apart from Thiago) are thinking > about this, whether there are objections against what I proposed or if you > think there are better solutions. This really needs fixing ASAP. I think not even css-files, js-files and png-files should be whitelisted by default to be honest. We already have a way of making such files public: put them in the public web context. If a Mixin, Component or Page includes a resources from the classpath, only then that specific asset should be whitelisted (including its localized alternatives if required). regards, Onno
