Re: files that begin with .

"Clemens Fischer" <[email protected]> 31 May 2004 11:14:27 +0200
Newsgroups gmane.comp.web.fnord
Message-ID <[email protected]>
* David D. Smith:

> I am not trying to serve configuration files like .procmailrc. I am using
> GNU Arch which, when served over HTTP, creates files named .listing
> instead of requiring directory listing creation in the web server and
> parsing of HTML in the client. And that is even irrelevant; what is the
> point of renaming the file? Why not just serve up the dotfile in the
> first place?

i think the `.' -> `:' was done to prevent URLs containing "/../*" to
accidentally serve files beyond document-root in non-chroot environemnts.
it makes sense to introduce some flag or compile time option to leave out
that check given the other precautions in the code.

there are several security-relaxing options, this one wouldn't make fnord
worse, especially as fnord is "expert-software" for people knowing what
they do.

david, you stand a better chance of getting your option into the code base
if you send a non-intrusive patch (#ifdef'ed braced and clean).

  clemens