Re: svn commit: samba r23047 - in branches/SAMBA_4_0/source/scripting/ejs: .

2007-05-22 Thread Rafal Szczesniak
On Tue, May 22, 2007 at 09:17:36AM +1000, [EMAIL PROTECTED] wrote: Mimir, + /* First, try to include file from current working directory. + This allows local includes which is handy sometimes. */ yes, it's very handy if you are a malicious hacker! Imagine the

Re: svn commit: samba r23047 - in branches/SAMBA_4_0/source/scripting/ejs: .

2007-05-22 Thread tridge
Rafal, Well, yes, you're right. I messed the order :) But it should be ok, to reverse the order of inclusion - defined paths first, local dir second. This would allow not to substitue commonly used include files and still be able to include something local. no, it's not OK. It's _never_

Re: svn commit: samba r23047 - in branches/SAMBA_4_0/source/scripting/ejs: .

2007-05-22 Thread Rafal Szczesniak
On Tue, May 22, 2007 at 04:32:30PM +1000, [EMAIL PROTECTED] wrote: Rafal, Well, yes, you're right. I messed the order :) But it should be ok, to reverse the order of inclusion - defined paths first, local dir second. This would allow not to substitue commonly used include files and

svn commit: samba r23047 - in branches/SAMBA_4_0/source/scripting/ejs: .

2007-05-21 Thread mimir
Author: mimir Date: 2007-05-21 19:53:57 + (Mon, 21 May 2007) New Revision: 23047 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=23047 Log: Allow local inclusion of js files as well as from predefined path(s). rafal Modified:

Re: svn commit: samba r23047 - in branches/SAMBA_4_0/source/scripting/ejs: .

2007-05-21 Thread tridge
Mimir, +/* First, try to include file from current working directory. + This allows local includes which is handy sometimes. */ yes, it's very handy if you are a malicious hacker! Imagine the admin has a ftp upload area, and cd's to that directory. He wants to see