[rt.cpan.org #37148] Bug in LWP::RobotUA - Robot UA could access forbidden documents if clock is going wrong

"Matthias Jaekle via RT" <[email protected]> Thu, 26 Jun 2008 18:50:51 -0400

Newsgroups	gmane.comp.lang.perl.modules.lwp
Message-ID	<[email protected]>

Thu Jun 26 18:50:49 2008: Request 37148 was acted upon.
Transaction: Ticket created by [email protected]
       Queue: libwww-perl
     Subject: Bug in LWP::RobotUA - Robot UA could access forbidden documents if clock is going wrong
   Broken in: (no value)
    Severity: (no value)
       Owner: Nobody
  Requestors: [email protected]
      Status: new
 Ticket <URL: http://rt.cpan.org/Ticket/Display.html?id=37148 >


Hello,

RobotUA compares as fresh_until time the local time and the remote 
server time.

If the local clock is going wrong, the comparison won't work.

So RobotRules->allowed could return -1 and allow RobotsUA to access 
forbidden documents!

Regards,

Matthias Jaekle