Lexa Software: Nginx-ru@sysoev.ru archive

		Apache-Talk @lexa.ru
		Inet-Admins @info.east.ru
		Filmscanners @halftone.co.uk
		Security-alerts @yandex-team.ru
		nginx-ru @sysoev.ru

СТАТЬИ

ПЕРСОНАЛЬНОЕ

ПРОГРАММЫ

ПИШИТЕ
ПИСЬМА

АРХИВ :: nginx-ru

Nginx-ru mailing list archive (nginx-ru@sysoev.ru)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Re[2]: unsafe URI

To: nginx-ru@xxxxxxxxx
Subject: Re: Re[2]: unsafe URI
From: "Alexey Mahotkin" <squadette@xxxxxxxxx>
Date: Sun, 9 Apr 2006 19:36:05 +0400
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=SiTZRKySSBoYfrvgx29/C5vaCTQzFt8UGYEoH5xtYHnjaFgFeeT6Bi/bRuL7IlH3286AY1ZvzvrMEo+iO1WJNBZwuZMwHgnVN2gtLufG0GzKVGvgtfAVyx7g5bvynGODfgzcl7ny+C0ew7E6bYDiuPE5/pPVAVF91A8FF0LZBas=
In-reply-to: <20060409151507.U99847@xxxxxxxxxxxxxxx>
References: <249217396.20060408190418@xxxxxxxxx> <20060408233729.L42099@xxxxxxxxxxxxxxxxxx> <1004312456.20060409130341@xxxxxxxxx> <20060409151507.U99847@xxxxxxxxxxxxxxx>

On 4/9/06, Dmitry Morozovsky <marck@xxxxxxxx> wrote:
> RV> Было бы очень хорошо. А нельзя /dir1/dir2/../../footer.inc превращать
> RV> в /footer.inc до подзапроса?
>
> А кто вам сказал что это будет так? Symlinks кто отменял?

По-моему, симлинки, которые рушат семантику

foo/.. == .

это подстава :-
--alexm

Follow-Ups:
- Re: Re[2]: unsafe URI
  - From: Dmitry Morozovsky

References:
- unsafe URI
  - From: Roman Veretelnikov
- Re: unsafe URI
  - From: Igor Sysoev
- Re[2]: unsafe URI
  - From: Roman Veretelnikov
- Re[2]: unsafe URI
  - From: Dmitry Morozovsky

Prev by Date: Re[2]: unsafe URI
Next by Date: Re: Re[2]: unsafe URI
Previous by thread: Re[2]: unsafe URI
Next by thread: Re: Re[2]: unsafe URI
Index(es):
- Date
- Thread