From owner-freebsd-questions@FreeBSD.ORG Wed Apr 30 12:48:19 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7041D37B401 for ; Wed, 30 Apr 2003 12:48:19 -0700 (PDT) Received: from shrike.submonkey.net (pc1-cdif2-5-cust38.cdif.cable.ntl.com [81.101.150.38]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9CBFA43F85 for ; Wed, 30 Apr 2003 12:48:18 -0700 (PDT) (envelope-from setantae@submonkey.net) Received: from setantae by shrike.submonkey.net with local (Exim 4.12) id 19AxYp-0005MO-00; Wed, 30 Apr 2003 20:48:11 +0100 Date: Wed, 30 Apr 2003 20:48:11 +0100 From: Ceri Davies To: Hugo Rodrigues Message-ID: <20030430194811.GA20299@submonkey.net> Mail-Followup-To: Ceri Davies , Hugo Rodrigues , Jim Mock , freebsd-questions@FreeBSD.ORG References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.4i Sender: Ceri Davies cc: Jim Mock cc: freebsd-questions@FreeBSD.ORG Subject: Re: Bug Report X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Apr 2003 19:48:19 -0000 On Mon, Apr 21, 2003 at 06:01:49PM -0700, Jim Mock wrote: > On Monday, April 21, 2003, at 10:54 AM, Hugo Rodrigues wrote: > >The Uk mirror of www.freebsd.org have a bug, that allow all the people > >see the source code of CGI?s of the page. > > You'll want to send this to www@FreeBSD.org, as well as submit a PR > using the send-pr(1) command. Actually, don't bother. I've submitted this to them before, and it doesn't actually matter because: 1) All the action attributes of the forms on the mirrors point at www.FreeBSD.org, so freefall.FreeBSD.org and www.FreeBSD.org are the only machines that the CGI scripts need to work on; 2) It doesn't matter if people get to see the source code of the perl CGIs, as they're all in CVS anyway. Yes it looks bad, but it's easier for our mirror sites if they don't have to worry about doing anything special in their webserver configuration to support the site. Thanks anyway, Ceri --