On Sat, 29 Nov 2014 08:42:17 +0100
Ivan Delalande <colona_AT_ycc.fr> wrote:
> Change the behavior of docroot, which is now used as a prefix path for
> all file operations related to static files. And add chrootdir, which is
> just the old docroot behavior and allows to control the path into which
> quark will chroot.
>
> Not having properly distinct configuration variables for chroot,
> document root and CGI root was specially annoying since commit 2822488
> which allowed users to retrieve the CGI script or binary by just
> guessing its path, since quark was chrooting into docroot before
> anything else, and thus the CGI script/binary was in the user accessible
> path.
>
> This is implemented by moving the reqbuf buffer in the middle of a
> bigger buffer, reqpath. That buffer contains the value of docroot at its
> beginning and reqbuf simply points to the first byte after this value.
Applied in mainline.
Thanks for submitting this!
Cheers
FRIGN
--
FRIGN <dev_AT_frign.de>
Received on Sun Nov 30 2014 - 23:37:04 CET