files.xml handler should disallow access to files with name beginning with a dot

[DotMG]

Related ticket: #692

This ticket applies only to trunk.

In addition, Error messages should be sent to user via GetRedirectMessage(). The files.xml handler generates normally an xml output, but if an error occurs, we issue a redirection, and the error message is displayed as an alert().

[DotMG]

(In [962]) This ticket can be seen as a COORDINATION ticket for #692 to trunk. But since {{files}} action in 1.1.7 is a somewhat enhanced version, the issue is taken differently.

• actions/files/files.php : porting #692 to trunk
• handlers/files.xml/files.xml.php : porting #692 to trunk and adding error messages.
• lang/en/en.inc.php : More error messages.

refs #696

[NilsLindenberg]

fixed?

[DarTar]

Retargeting to 1.3, this ticket has already been closed in trunk, from which 1.3 will be branched. Consider backporting urgent issues to 1.2.X