Beefy Boxes and Bandwidth Generously Provided by pair Networks
Perl-Sensitive Sunglasses
 
PerlMonks  

Re^3: How to safely define a CGI program's application base directory

by choroba (Abbot)
on Feb 10, 2013 at 22:37 UTC ( #1018077=note: print w/ replies, xml ) Need Help??


in reply to Re^2: How to safely define a CGI program's application base directory
in thread How to safely define a CGI program's application base directory

What threat are you trying to avoid? It is upon you to tell what is safe. If you know there are three possible values, you can try something like

m{^(/path1|/path2|/path3)/MyApp$}
Someone can still tweak the config to point to a wrong path (valid for a different server). You can even include other conditions into the if, not only the single match.
لսႽ ᥲᥒ⚪⟊Ⴙᘓᖇ Ꮅᘓᖇ⎱ Ⴙᥲ𝇋ƙᘓᖇ


Comment on Re^3: How to safely define a CGI program's application base directory
Select or Download Code

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://1018077]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others making s'mores by the fire in the courtyard of the Monastery: (15)
As of 2014-10-30 19:10 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    For retirement, I am banking on:










    Results (208 votes), past polls