Filenames cannot include ampersands in CMS400 7.53 sp2
Category: Stacy Benefield, Ektron
The ins and outs of the technical side to Web sites and content management software never cease to amaze me. It’s so cool what our developers are able to accomplish these days. But, those same intricacies are also at play when it comes to things that could go wrong. Who knew that a little ‘ol ampersand (&) could cause so much trouble? Well, according to Ektron, CMS400.NET version 7.53 sp2 no longer supports ampersands (&) in file names thanks to security vulnerabilities blamed on the lowly character. This applies to files uploaded in the library or imported as DMS assets.
Unfortunately, the software will still let you upload the files in the library, but when you try to link to the file, the URL will give an error. We’re hoping to see Ektron prevent the files from being uploaded in the first place in a future version of the software.
Of course, beefing up the security of the CMS is a great action on Ektron’s part, but I’m sorry for the inconvenience it may cause some of our clients. Please review your Web site for broken links by running Ektron’s bad link report. If you note any broken links to files that include an ampersand (&) in the name, you will want to rename the files, upload the new files to the CMS, and re-link them in your content.
Check out this blog post if you’re not sure how to run the bad link report.
Posted By: Stacy Benefield | Date Published: 10.21.2008 | Comments (0)