Re: Web app example using ersatz

2012-01-31 Thread Alexander Burger
Hi Joe, I uploaded the code but couldn't figure out how to link to it on the page. I'm afraid this is not possible. The wiki supports only img and Now I've added support for arbitrary files to the Wiki. We could extend it for arbitrary mimetypes, but then I'm not sure which tag to

Re: Web app example using ersatz

2012-01-31 Thread Joe Bogner
Hi Alex - Great! I see the drawback with losing the name. For now I've just added some text to instruct please rename to a zip. With such cryptic file names it adds to the security by obscurity (hah!). Reminds me of the old trick in email to have file foo.zip.rename to suggest people to rename.

Re: Web app example using ersatz

2012-01-31 Thread Joe Bogner
Hi Henrik, Thanks for the feedback! Yes, I plan on extending it further. I fixed a small bug with having to decode the urlencoded post variables (e.g. 'hello%20world'). At first I was stumped because ht:Pack is implemented in ht.c so there wasn't a java implementation (ht:Pack (chop

Re: Web app example using ersatz

2012-01-31 Thread Jakob Eriksson
On January 31, 2012 at 11:19 AM Joe Bogner joebog...@gmail.com wrote: worried about the security of it. Maybe if I were to pick a single mimetype, I'd go with zip or tar.gz as that's the main reason someone would upload if it's too much to paste in as a code example or to include a

Re: Web app example using ersatz

2012-01-31 Thread Alexander Burger
Hi Joe, Hi Alex - Great! I see the drawback with losing the name. For now I've just added some text to instruct please rename to a zip. With such cryptic file names it adds to the security by obscurity (hah!). Haha, yeah. But, anyway, I've found a way. I generate a href which calls a

Re: Web app example using ersatz

2012-01-30 Thread Jakob Eriksson
On January 30, 2012 at 3:50 PM Joe Bogner joebog...@gmail.com wrote: I spent the weekend working on an example web app using ersatz. I've written it up here: http://picolisp.com/5000/!wiki?ErsatzWebApp Please let me know what you think   Awesome. I will bless it with the first bug report!

Re: Web app example using ersatz

2012-01-30 Thread Alexander Burger
On Mon, Jan 30, 2012 at 09:50:21AM -0500, Joe Bogner wrote: I uploaded the code but couldn't figure out how to link to it on the page. I'm afraid this is not possible. The wiki supports only img and video tags for uploaded files so far. This distinction is done based on the file's mimetype.

Re: Web app example using ersatz

2012-01-30 Thread Alexander Burger
Hi Jakob, There is no silver bullet for this problem. Even images could be malicious. Yeah, that's right. But the wiki won't do anything with images or videos, just push them to the browser. So I assume the wiki itself is not in danger. Of course, there's no absolute security ;-) Different