Date: Wed, 30 Apr 2003 20:48:11 +0100 From: Ceri Davies <setantae@submonkey.net> To: Hugo Rodrigues <hrod@neeec.deec.uc.pt> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Bug Report Message-ID: <20030430194811.GA20299@submonkey.net> In-Reply-To: <FF5D5203-745D-11D7-941E-000393460DB2@soupnazi.org> References: <Pine.LNX.4.33.0304211852200.10307-100000@neeec.deec.uc.pt> <FF5D5203-745D-11D7-941E-000393460DB2@soupnazi.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Apr 21, 2003 at 06:01:49PM -0700, Jim Mock wrote: > On Monday, April 21, 2003, at 10:54 AM, Hugo Rodrigues wrote: > >The Uk mirror of www.freebsd.org have a bug, that allow all the people > >see the source code of CGI?s of the page. > > You'll want to send this to www@FreeBSD.org, as well as submit a PR > using the send-pr(1) command. Actually, don't bother. I've submitted this to them before, and it doesn't actually matter because: 1) All the action attributes of the forms on the mirrors point at www.FreeBSD.org, so freefall.FreeBSD.org and www.FreeBSD.org are the only machines that the CGI scripts need to work on; 2) It doesn't matter if people get to see the source code of the perl CGIs, as they're all in CVS anyway. Yes it looks bad, but it's easier for our mirror sites if they don't have to worry about doing anything special in their webserver configuration to support the site. Thanks anyway, Ceri --
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030430194811.GA20299>