Hi,

I read a comment about the fear that tntnet may export more than wanted 
with static@tntnet.

I just want to point out that it is not the case.

A url like "http://somehost/../../etc/passwd"; is not accepted by tntnet 
at all. Tntnet checks for paths, which tries to escape from the root 
directory. Tntnet accepts double dots but only if do not escape from 
anywhere. So you do not have to worry when passing the url to 
static@tntnet or even when you use the path in your own components.


Tommi

------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Tntnet-general mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tntnet-general

Reply via email to