Re: [Webware-devel] security hole in WebKit

2001-12-13 Thread Tavis Rudd
Here's a patch to implement ExtensionsToServe, FilesToHide, and FilesToServe. They work as I documented yesterday, and will also need to be added to the default config file. IMHO,there's far too much coupling in there between the Application and Request classes, which makes it harder than it

Re: [Webware-devel] security hole in WebKit

2001-12-13 Thread Ken Lalonde
I submitted at patch to the webware SF Patches page a while back that implements "ExtensionsToServe": https://sourceforge.net/tracker/index.php?func=detail&aid=486598&group_id=4866&atid=304866 But the fix is incomplete: it only applies to URIs that don't specify a trailing extension. Changin

Re: [Webware-devel] security hole in WebKit

2001-12-13 Thread Tavis Rudd
On Thursday 13 December 2001 11:59, Geoffrey Talvola wrote: > 2 questions: > > - Can this be made backward-compatible by also allowing the name > "ExtensionsToIgnore", perhaps emitting a deprecation warning > message? Sure, why don't we just stick with ExtensionsToIgnore for now? I think 'Exten

Re: [Webware-devel] security hole in WebKit

2001-12-13 Thread Geoffrey Talvola
2 questions: - Can this be made backward-compatible by also allowing the name "ExtensionsToIgnore", perhaps emitting a deprecation warning message? - Now that you've done the work in your experimental version, could you adapt it to create a patch for Webware CVS? At 01:40 PM 12/12/01 -0800, T