Re: [AOLSERVER] Writing custom ADP Parsers

[Jim Davidson]

In a message dated 12/15/04 6:15:33 PM, [EMAIL PROTECTED] writes:

I'm trying to build a restricted execution environment for ADP pages,
and to make a clean break with the current code base, I want a new
parser for ADP pages for some of my web pages.

Poking through the AOLServer docs, I found this encouraging snippet:

� � http://www.aolserver.com/docs/devel/c/api/c-ch8.htm#861558

� � � � Ns_AdpRegisterParser

� � � � Overview

� � � � Register a parser for ADPs

� � � � [...]

Except, that this promising looking API call has the following
implementation:

� � int Ns_AdpRegisterParser(char *extension, Ns_AdpParserProc *proc)
� � {
� � � � return NS_ERROR;
� � }

The new 4.0 API function, ns_register_adp, looks like it might be a
suitable replacement, but it is undocumented:

� � http://www.aolserver.com/40drafts/tclapi/general.html#ns_register_adp
� � http://panoptic.com/wiki/aolserver/868@

So, how would I go about implementing a restricted execution environment
for ADP pages in AOLServer 4.x?

Hi,

The parser API has indeed been removed.  However, the current parser includes a "safe eval" mode which you can access with "ns_adp_safeeval".  I believe it disables <% ... %> but enables registered tags which would allow you to protect and control specific code -- check the latest source for ADP_SAFE flag.  Perhaps that will help you out.

-Jim
2">