Dan,
If I turn on cf debugging I now get a few access denied exceptions along
with the usual coldspring property does not exist exceptions. I've attached
them so you can see which filepath's its failing on.
I'm not sure what the expected behaviour of fileExists() is when trying to
verify a file outside the sandbox, but my feeling is that a runtime
exception would be the correct thing for CF to do. Otherwise you could use
it to probe the structure of a server and find security exploits.
Cheers, Chris
2009/9/18 Dan Wilson <[email protected]>
> Thanks Chris,
>
> Lemme see if I can integrate and do integration testing before I have to
> head out this morning. I'll report back in a half hour.
>
> DW
>
>
> On Fri, Sep 18, 2009 at 6:44 AM, Chris Blackwell <[email protected]>wrote:
>
>> Ok,
>> When ModelGlue loads it attempts to see if certain config files exist
>> based on a relative path before calling expandpath() and trying again, for
>> example
>> fileExists("/ModelGlue/gesture/configuration/ModelGlueConfiguration.xml").
>>
>> It would appear that on certain platforms with sandbox security enabled
>> this will throw an error rather than returning false. The solution is to
>> try/catch these attempts.
>>
>> The culprits are ModelGlue/gesture/loading/ColdSpringBootstrapper.cfc
>> and ModelGlue/gesture/module/XMLModuleLoader.cfc
>>
>> I have attached patches for these files which should resolve the issue.
>>
>> Cheers, Chris
>>
>>
>>
>>
>>
>>
>
>
> --
> “Come to the edge, he said. They said: We are afraid. Come to the edge, he
> said. They came. He pushed them and they flew.”
>
> Guillaume Apollinaire quotes
>
> >
>
--~--~---------~--~----~------------~-------~--~----~
Model-Glue Sites:
Home Page: http://www.model-glue.com
Documentation: http://docs.model-glue.com
Bug Tracker: http://bugs.model-glue.com
Blog: http://www.model-glue.com/blog
You received this message because you are subscribed to the Google
Groups "model-glue" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/model-glue?hl=en
-~----------~----~----~----~------~----~------~--~---
Exceptions
13:14:27.027 - java.security.AccessControlException - in
C:\Coldfusion\CF8\wwwroot\ModelGlue\gesture\loading\ColdSpringBootstrapper.cfc
: line 42
access denied (java.io.FilePermission
\ModelGlue\gesture\configuration\ModelGlueConfiguration.xml read)
13:14:28.028 - java.security.AccessControlException - in
C:\Coldfusion\CF8\wwwroot\ModelGlue\gesture\loading\ColdSpringBootstrapper.cfc
: line 67
access denied (java.io.FilePermission .\config\ColdSpring.xml read)
13:14:28.028 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (OrmService) does not exist for bean:
modelglue.ModelGlue
13:14:28.028 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (InternalBeanFactory) does not exist for bean:
modelglue.ModelGlue
13:14:28.028 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (OrmAdapter) does not exist for bean:
modelglue.ModelGlue
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (GenerationViewPath) does not exist for bean:
modelglue.modelGlueConfiguration
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (RescaffoldKey) does not exist for bean:
modelglue.modelGlueConfiguration
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (GenerationModule) does not exist for bean:
modelglue.modelGlueConfiguration
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (ScaffoldConfigurationPath) does not exist for
bean: modelglue.modelGlueConfiguration
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (DefaultTemplate) does not exist for bean:
modelglue.modelGlueConfiguration
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (StatePrecedence) does not exist for bean:
modelglue.modelGlueConfiguration
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (GenerationControllerPath) does not exist for
bean: modelglue.modelGlueConfiguration
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (PrimaryModule) does not exist for bean:
modelglue.modelGlueConfiguration
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (PrimaryModuleType) does not exist for bean:
modelglue.modelGlueConfiguration
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (GenerationConfigurationPath) does not exist for
bean: modelglue.modelGlueConfiguration
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (RescaffoldPassword) does not exist for bean:
modelglue.modelGlueConfiguration
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (RequestFormatValue) does not exist for bean:
modelglue.modelGlueConfiguration
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 300
constructor-arg requested (constructorArgs) does not exist for
bean: modelglue.ModuleLoaderFactory
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 300
constructor-arg requested (createSingletons) does not exist for
bean: modelglue.ModuleLoaderFactory
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 300
constructor-arg requested (beanMaker) does not exist for bean:
modelGlue.beanPopulator
13:14:29.029 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (BeanFactory) does not exist for bean:
modelGlue.iocAdapter
13:14:30.030 - java.security.AccessControlException - in
C:\Coldfusion\CF8\wwwroot\ModelGlue\gesture\module\XMLModuleLoader.cfc : line 36
access denied (java.io.FilePermission
\ModelGlue\gesture\modules\internal\initialization\config\initialization.xml
read)
13:14:30.030 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 300
constructor-arg requested (constructorArgs) does not exist for
bean: modelglue.EventHandlerFactory
13:14:30.030 - coldspring.beanDefException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\BeanDefinition.cfc : line 328
property requested (BeanFactory) does not exist for bean:
modelglue.controllerBeanInjector
13:14:30.030 - java.security.AccessControlException - in
C:\Coldfusion\CF8\wwwroot\ModelGlue\gesture\module\XMLModuleLoader.cfc : line 36
access denied (java.io.FilePermission
\ModelGlue\gesture\modules\orm\config\ModelGlue.xml read)
13:14:30.030 - java.security.AccessControlException - in
C:\Coldfusion\CF8\wwwroot\ModelGlue\gesture\module\XMLModuleLoader.cfc : line 36
access denied (java.io.FilePermission
\ModelGlue\gesture\modules\internal\population\config\population.xml read)
13:14:30.030 - java.security.AccessControlException - in
C:\Coldfusion\CF8\wwwroot\ModelGlue\gesture\module\XMLModuleLoader.cfc : line 36
access denied (java.io.FilePermission
\ModelGlue\gesture\modules\internal\generation\config\generation.xml read)
13:14:30.030 - coldspring.NoSuchBeanDefinitionException - in
C:\Coldfusion\CF8\wwwroot\coldspring\beans\DefaultXmlBeanFactory.cfc : line 646
13:14:30.030 - java.security.AccessControlException - in
C:\Coldfusion\CF8\wwwroot\ModelGlue\gesture\module\XMLModuleLoader.cfc : line 36
access denied (java.io.FilePermission
\ModelGlue\gesture\modules\internal\configuration\config\configuration.xml read)
13:14:31.031 - java.security.AccessControlException - in
C:\Coldfusion\CF8\wwwroot\ModelGlue\gesture\module\XMLModuleLoader.cfc : line 36
access denied (java.io.FilePermission config\ModelGlue.xml read)
13:14:31.031 - java.security.AccessControlException - in
C:\Coldfusion\CF8\wwwroot\ModelGlue\gesture\module\XMLModuleLoader.cfc : line 36
access denied (java.io.FilePermission
\ModelGlue\gesture\modules\internal\invocation\config\invocation.xml read)
