Re: files that begin with .
"Clemens Fischer" <[email protected]> 31 May 2004 11:14:27 +0200
| Newsgroups | gmane.comp.web.fnord |
|---|---|
| Message-ID | <[email protected]> |
* David D. Smith: > I am not trying to serve configuration files like .procmailrc. I am using > GNU Arch which, when served over HTTP, creates files named .listing > instead of requiring directory listing creation in the web server and > parsing of HTML in the client. And that is even irrelevant; what is the > point of renaming the file? Why not just serve up the dotfile in the > first place? i think the `.' -> `:' was done to prevent URLs containing "/../*" to accidentally serve files beyond document-root in non-chroot environemnts. it makes sense to introduce some flag or compile time option to leave out that check given the other precautions in the code. there are several security-relaxing options, this one wouldn't make fnord worse, especially as fnord is "expert-software" for people knowing what they do. david, you stand a better chance of getting your option into the code base if you send a non-intrusive patch (#ifdef'ed braced and clean). clemens