If we impliment a hook for page:before then whatever we output in that hook will also get injected into webservice.
this is because the web service plugin also uses elgg_view_page.
I think this is a bug of ELGG.
what do you say ?
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by Raül Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.
- Matt Beckett@Beck24

Matt Beckett - 0 likes
- enRaiser@enraiser

enRaiser - 0 likes
You must log in to post replies.I don't think it's necessarily a bug, when you use a hook it's up to you to check parameters and such that your code is only running when you want it to
but it obvious necessity.
luckily in my case I set elgg_set_view('engap'); in web service. so in I prevented the page:before code, by restricting it to only default view.
but others are not that lucky, they also need sililar trick, and so all public plugins who use page:before, will have to be hacked by people who enable web service.