Mailing List Archive: Cherokee: dev

Issue 1354 in cherokee: "List & Send" hides symlinks but does not forbids them

Index | Next | Previous | View Threaded

cherokee at googlecode

Apr 26, 2012, 3:07 PM

Post #1 of 2 (115 views)
Permalink

Issue 1354 in cherokee: "List & Send" hides symlinks but does not forbids them

Status: New
Owner: ----

New issue 1354 by AnimusPE...@gmail.com: "List & Send" hides symlinks but
does not forbids them
http://code.google.com/p/cherokee/issues/detail?id=1354

What steps will reproduce the problem?
1. Create rule with "List & Send" handler
2. Uncheck "Allow symbolic links" checkbox
3. Save settings and restart server
4. Open in browser resource for which rule was created
5. Insert in URL symlink name which definitely exists
6. Hit enter.

What is the expected output?
404

What do you see instead?
UNIX root dir

What version of the product are you using? On what operating system?
Cherokee Web Server 1.2.101

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev [at] lists
http://lists.octality.com/listinfo/cherokee-dev

cherokee at googlecode

Jun 8, 2012, 9:29 AM

Post #2 of 2 (64 views)
Permalink

Re: Issue 1354 in cherokee: "List & Send" hides symlinks but does not forbids them [In reply to]

Updates:
Status: Accepted
Labels: Type-Enhancement Priority-Low Security Component-Logic
Component-Admin

Comment #1 on issue 1354 by ste...@konink.de: "List & Send" hides symlinks
but does not forbids them
http://code.google.com/p/cherokee/issues/detail?id=1354

The feature is actually under 'show', and it was in the past only hiding
symlinks, there isn't even a check if the file is infact a symlink when
serving it. We would have to figure out first if it is possible to check if
a file is accessed via a symlink, or that the directory that is requested
is a symlink.

I'll make this a feature request.

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev [at] lists
http://lists.octality.com/listinfo/cherokee-dev

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads