similar to: page caching urls with space characters broken in webrick and mongrel

Jeremy, I found your old message with this title. I struck the same thing, where the current drive wasn''t the same as the drive I wanted to serve (some) files from. So here''s the patch to add to lib/mongrel/handlers.rb contains class DirHandler. I added two things, first to initialize: def initialize(path, listing_allowed=true, index_html="index.html")

Is it correct that Kernel.require returns (1) true if the file was successfully required (and wasn''t already loaded), (2) false if it was successfully required (but was already loaded), or (3) throws a LoadError if it couldn''t be successfully required. I claim that the rdoc is misleading and should be corrected as it says:

Hey folks, I have the following situation: I have a secure server, and I''d like to run multiple Rails apps without dealing with setting up multiple secure servers, with their fixed IPs, etc. So, I want to do https:// secure.domain.com/app1/ and https://secure.domain.com/app2/ etc. In lighttpd this is possible using a combination of relative_url_root in each app (in

I just found a vulnerability in one of my web apps that was running Mongrel 1.1.2 where I could go to URIs like /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd and it would serve the actual /etc/passwd file. The issue seems to be in lib/mongrel/handlers.rb in the change from 1.0.3 to 1.0.4 req_path = HttpRequest.unescape(path_info) - if @path - req_path =

This is a proposed patch for the security hole reported today. You can just add the test for @path being at index 0 in the exanded req_path as shown below. Take heed of the comment I''ve added too, and there was a test for this very attack in the unit test suite, so it was removed by someone as well. I didn''t test this but I''m pretty sure it''s the fix. ===

Hi, I submitted this a few weeks ago but here it is again since I got no response. If there is somewhere else I should send this, please tell me. This patch implements SSH2_FXF_APPEND in the sftp server. It is a fairly trivial patch and applies against the proper OpenSSH and the Portable edition. I would argue that it is important for OpenSSH to implement SSH2_FXF_APPEND since it is in the

It seems that Merb is sending static files with Mongrel::DirHandler. (mongrel_handler.rb:52) if get_or_head and @files.can_serve(path_info) # File exists as-is so serve it up MERB_LOGGER.info("Serving static file: #{path_info}") @files.process(request,response) I haven''t done benchmarks and I''ve hardly glanced at DirHandler''s code but the

My (Rails 3) routes.rb has the following entry: resources :articles, :path => "記事" This works in my production environment, as passenger unescapes the path from /%E8%A8%98%E4%BA%8B to /記事. However, in my development environment, I''m using Mongrel, which does not unescape the path, so it does not work unless I change my routes to resources :articles, :path =>

Hello list, I am trying to get a DFS share to work here, linking to a few Windows 2000, XP and NT machines. Using Samba 3.0.6 on Debian. I followed the instructions in chapter 17 of the official HOWTO collections and set it up like this: [global] ... netbios name = fileserver host msdfs = yes [dfs] path = /home/data/shares/postdfs valid users = @post force group = +post read only = No force

Sometimes linux-security gets a message stating that program xxx might be vulnerable to an yyy-attack (*). Sometimes people follow up stating that they couldn''t find an exploit. If I ask the test-squad to test some know-to-work exploit, I get about a 50/50 response. Half couldn''t get the published exploit to work. I''ve learned to interpret "nope it doesn''t

This is another take on logging for sftp-server. Given the number of private email requests I've received for this patch, I assume there is signifigant enough interest to request it be reviewed for inclusion into the release. The patch is against 3.1p1, and is completely disabled by default. To enable logging, one must use compile time directives (-DSFTP_LOGGING). This was done due to prior

Is there a mail list or USENET group for lighttpd WEBrick questions. I posted a simple CGI question to this list last week and got one responce and that responce told me I was on the wrong list with Ruby based from / CGI questions. The code I posted looks correct but does not work giving a Routing Error. This makes me think something is wrong with the set up of WEBrick. I am only doing

I have just upgraded to Ruby 1.8.7 and Rails 2.2.2. My previous project was at Ruby 1.8.6 and Rails 2.0.2. My platform is Windows and Webrick for development. When I run Webrick, the server starts without error, the application runs, database connections work and I can click through the pages and display data. But it does not serve any stylesheets or javascript files. What''s

I''m using mongrel as my http server. I was using yslow to evaluate the performance of my web site and noticed I was downloading the .css file on every request??? I use one .css file for the whole site and I though I would be cached? Yslow indicates that there is no expires date/time set for the css file. How can I tell mongrel to send an expires header with my static content? thanks,

hi all, for some reason my WEBrick server became extremely slow on live.i am using Fedora 14 and Ruby 1.8.7 ,Rails 2.3.11 and RubyGem 1.6.2. is there any reason why this would be the case? -- Thanks and Regards Sachin S. Kewale -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to

From: Maros Zatko <mzatko@redhat.com> --- fish/test/Makefile.am | 39 ++++++++++++++++ fish/test/testquoting.c | 120 ++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 159 insertions(+) create mode 100644 fish/test/Makefile.am create mode 100644 fish/test/testquoting.c diff --git a/fish/test/Makefile.am b/fish/test/Makefile.am new file mode 100644 index

I just started using Mechanize, and started using Ruby about thirty seconds before that, but one of the sites I''m scraping does a redirect on form submission to a badly-formed relative URL: index.cfm?action=bing&bang=boom=1|a=|b=|c= (etc.) Interestingly, Mechanize 0.6.2 handled this OK, but in 0.6.3 this causes a URI::InvalidURIError exception from URI.parse() in to_absolute_uri

Mongrel 0.3.13.3 Windows XP Rails 1.1.6 I have a rails app that serves up mp3 files via the send_file command. We create a playlist (M3U) with URLs to the mp3s. These play just fine using Windows Media Player. However using WinAmp we get an error "error syncing to stream" when it tries to request the mp3. After playing around I found that if I am running Rails under Webrick WinAmp

After copying the acts_as_ferret pluin to my rails folder, I can''t boot WEBrick. Has anyone run into this before? -- Posted via http://www.ruby-forum.com/.

So I''m trying to create a dashboard that displays data pulled in through RoR. Some data populates table rows and other data I''m trying to feed into an Adobe Flash swf file. I have the path correct to my swf file (I can it being accessed in Safari activity window) but it''s not rendering. When I try to access the file directly within the :3000 environment I get