Rhesa Rozendaal wrote:
> Michael Peters wrote:
> 
>>
>> Rhesa Rozendaal wrote:
>>
>>> I've been a busy little bee, and have updated three modules. Making
>>> CAP::HtmlTidy co-operate with CAP::DevPopup was my primary goal for
>>> today, and I'm quite pleased with the result. You can see it in action
>>> on http://oss.rhesa.com/scripts/dp.cgi
>>
>>
>>
>> That's pretty cool Rhesa. I have a couple of comments/questions...
>>
>> The HTTP headers look like $ENV variables... not headers (ie, PATH?).
> 
> 
> Yep, that's right. I didn't see the value in filtering the odd ones out.
> Any suggestions?

Checking the CGI.pm docs, you could use http() (and https()). I'd
suggest checking with can() first, since it's not commonly used and some
of the query replacement objects won't implement it.

>> Would it be possible to add outgoing headers to the list too?
> 
> 
> As for outgoing headers, all I can print is what CGI::Application would
> generate. My plugin is not in a position to examine the output stream,
> for obvious reasons.

Yeah, that's an expected limitation. Obviously if any apache mods futz
with the header, C::A can't see it. But I think it would be useful to
see the outgoing headers that C::A produced when trying to track down
cookie problems, etc.

>> Thanks for using my 'ViewSource' plugin (which will be renamed
>> 'ViewCode' since 'ViewSource' is really a bad name as pointed out by
>> Mark). I am planning on making that an option for the popup plugin too.
> 
> 
> ViewSource is pretty neat, I almost wish I had a vim colorscheme like
> that :)
> It could do with some security enhancements though. I didn't really look
> for it, but is there a way to limit it to a specific path? Right now
> it's possible to view just about any installed module on my system.

Well, the docs do say :)

 SECURITY

  This plugin is designed to be used for development only. Please do not
  use it in a production system as it will allow anyone to see the
  source code for any loaded module. Consider yourself warned.

But maybe a limiting path wouldn't be a bad idea.

-- 
Michael Peters
Developer
Plus Three, LP


---------------------------------------------------------------------
Web Archive:  http://www.mail-archive.com/[email protected]/
              http://marc.theaimsgroup.com/?l=cgiapp&r=1&w=2
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to