Olivier Cornu wrote: > On Wed, Sep 2, 2009 at 08:20, M Gozler wrote: > > > Now I am trying to install it also using "http://localhost"; but the > > server is sending a 302:Found redirect to GM/Firefox http client, and > > GM doesn't like it and won't get the @required files (probably because > > GM developers would be saying, "what the hell can be done with a 302 > > response? Just serve the files!" > > It's more a question of "security" imo: the @require contract between > GM and the user is that GM will download and include the file seating > at the given URL. If we start following redirections, we might end up > installing something else. > There have been talks about adding integrity checks to @required > files. In these circumstances, following redirections would be ok. > > By the way, how come you get a redirection from your localhost in the > first place?
I do a great deal of serving outside of the server's document root, which is C:\inetpub\wwwroot\ in the absolute path in my system. So I don't have problems wondering if copies of documents in the root are the latest edition/ version, I don't make copies at all and instead I make very heavy use of Windows system hardlinks (which the server can follow) as well as use of the server's Alias directive. I have placed the GM scripts to be installed in something like D:\MyInteractiveStuff\GMscripts\. In my server config, I have aliased /myinteractivestuff/ to be 'D:\MyInteractiveStuff\'. So part of the path is re-written or referenced. If put in the URL: http://localhost/myInteractiveStuff/GMScripts/script1.js The server translates it as D:\MyInteractiveStuff\GMScripts\script1.js It finds it, but is returning a 302:Found. I think I need to take this issue up with the Apache users group to have them explain to me which module and/or directive I should be using to do this so that it serves up the resource. As for the possibility of doing a lot of serving outside the document root, the security considerations as to my server configuration are not at all worrisome, since my employer and my home ISP seem to be firewalling port 80 access from the world anyway (even I make use of a dynamic IP service). --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "greasemonkey-users" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/greasemonkey-users?hl=en -~----------~----~----~----~------~----~------~--~---
