similar to: X-Sendfile, static files, windows

Hey folks, I have the following situation: I have a secure server, and I''d like to run multiple Rails apps without dealing with setting up multiple secure servers, with their fixed IPs, etc. So, I want to do https:// secure.domain.com/app1/ and https://secure.domain.com/app2/ etc. In lighttpd this is possible using a combination of relative_url_root in each app (in

Page caching of urls with spaces in them using WEBrick and Mongrel is broken in Edge Rails (and Rails 1.1.6, where I started). This is due to the dispatch flow of control in both servers converting ''+'' in requested paths into '' '' chars, whereas the page caching system writes cache files for URLs with spaces in them out as encoded ''+''

I am not sure what i am doing wrong here, but no matter what i try i get no output from mongrel_config: $ mongrel_rails configtool $ telnet localhost 3001 Trying 127.0.0.1... Connected to localhost. Escape character is ''^]''. GET /config/ HTTP/1.1 HTTP/1.1 200 OK Connection: close Date: Tue, 19 Dec 2006 05:33:16 GMT Content-Type: text/html Content-Length: 0 Connection closed by

I just found a vulnerability in one of my web apps that was running Mongrel 1.1.2 where I could go to URIs like /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd and it would serve the actual /etc/passwd file. The issue seems to be in lib/mongrel/handlers.rb in the change from 1.0.3 to 1.0.4 req_path = HttpRequest.unescape(path_info) - if @path - req_path =

It seems that Merb is sending static files with Mongrel::DirHandler. (mongrel_handler.rb:52) if get_or_head and @files.can_serve(path_info) # File exists as-is so serve it up MERB_LOGGER.info("Serving static file: #{path_info}") @files.process(request,response) I haven''t done benchmarks and I''ve hardly glanced at DirHandler''s code but the

A new TRAC entry with patch has been added (initially for Camping) to allow X-SendFile on Windows to use DirHandler to send files on drives other than the current drive, if the DirHandler base path is "/" (which is the way Camping uses DirHandler). As it was, "/" gets expanded to "C:/", and then you can''t serve files on any other drive, which I needed to do

Howdy. I''m working on a RoR CMS and need cached pages to all be in public/cache rather than public [in order to set svn:ignore on all the files properly]. I can get page_cache_directory set correctly and the pages are cached in the right place but Mongrel isn''t serving them because it''s only looking for them in public. During development I know I can set -r public/cache

This is a proposed patch for the security hole reported today. You can just add the test for @path being at index 0 in the exanded req_path as shown below. Take heed of the comment I''ve added too, and there was a test for this very attack in the unit test suite, so it was removed by someone as well. I didn''t test this but I''m pretty sure it''s the fix. ===

Hey Folks, Another announcement of Mongrel -- the fastest little web server library for Ruby yet. This release is nice in that it should build on win32 better and it now sports a small DirHandler that can serve directories and files. This means Mongrel is closer to replacing WEBrick as a Rails debug runner. You can get the releases and information from: *

I started actually using the upload progress handler, and noticed it was leaking memory over time. Looking at the code, I noticed that cancelled uploads weren''t being cleaned up. I bugged Zed about adding a request_abort callback to handlers, but I found a simple way to monkey patch that in: # config/mongrel_upload_progress.conf # yes, this file is being used with -S meaning

Hi folks, I just put a pre-release of Mongrel up for people to try. You can install it with: gem install mongrel --source=http://mongrel.rubyforge.org/releases/ And try out your application and confirm the stuff works. USE RFUZZ AND RUBY If you find a bug, I''d appreciate it if you can go grab RFuzz (or use net/http) and work up a little bit of Ruby that demonstrates the bug. If

im using Mongrels to serve up /usr/portage/packages for other gentoo boxen. since i guess im the guinea pig with the DirHandler, ran into a couple issues: first, the client showed no files in the remote binhost, turns out the DirHandler was adding a trailing "/" to every filename, presumably making the client think they were directories, not files. attached is a patch which fixes this

Hey all, First off, thanks to Rick Olson and whoever else was involved with this plugin... It''s been amazingly easy to implement. I''ve got a question about the path_info parameter, though... It seems that unless the request PATH_INFO exactly matches the path_info passed in to the plugin at inclusion, it won''t actually trigger Add and add the upload to the list of

I''m wondering if it''s possible to setup mongrel to have multiple document roots? The use case I''m trying to solve is one where I have a library of shared CSS/JS/Images and would like multiple rails application to use them. I have written a proxy controller and added some routes to serve the static files and it works reasonably well, but is extremely slow, because

in one of my recent email, I add .to_s to PATH_INFO in camping code. actually, this is probably very wrong. the problem is probably something like PATH_INFO does not exist when using FastCGI. I have not done all my homework, but so far what I found is lighttpd has a special option "broken-scriptfilename": breaks SCRIPT_FILENAME in a wat that PHP can extract PATH_INFO from it (default:

I''ve just checked in changes to improve handling of massive posts and massive downloads. Generally speaking, Mongrel has been keeping everything in memory. (Unless you''re using DirHandler and have the sendfile gem in place.) Now, downloads should be pretty swift even without the sendfile gem. HttpResponse#send_file rips out the file streaming support from DirHandler and

Hi, I wrote a message earlier regarding how I wasn''t getting any feedback from mongrel_upload_progress. After putting lots of debug messages in the plugin, I figured out what was going on. I had a route like this setup in routes.rb (this was the problem): map.upload "upload/:upload_id", :controller => "file", :action

Hey guys. I''ve been playing with RedirectHandler and it''s pretty neat, but I question its usefulness. At work we do the trendy "/javascripts/spy.1152734636.js"-style asset includes rather than the default Rails style of "/javascripts/spy.js? 1152734636". This is no problem with mod_rewrite as we run the basic Apache => Pen => Mongrel setup.

Hi, These were some suggestions from Clifford Heath regarding win32-security and Windows security in general. Regards, Dan PS - I''ll be on vacation until Jan, 2009. Merry Christmas and Happy New Year everyone! ---------- Forwarded message ---------- From: Clifford Heath <clifford.heath at gmail.com> Date: Fri, Dec 19, 2008 at 12:34 AM Subject: Re: [ANN] win32-security 0.1.0

Hi There! I''d like some feedback before I try to implement some funky rails routes based on an acts_as_tree model. I have a Page model that acts_as_tree. I''d like the URLs to look something like this: http://localhost/about-us/staff/jeff or, another example... http://localhost/what-we-do/products/our-great-cms/features/faqs/ So, as many sub-nodes the user creates,