From owner-freebsd-www@FreeBSD.ORG  Tue Jul  4 14:10:59 2006
Return-Path: <owner-freebsd-www@FreeBSD.ORG>
X-Original-To: freebsd-www@FreeBSD.org
Delivered-To: freebsd-www@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2A29C16A4DD
	for <freebsd-www@FreeBSD.org>; Tue,  4 Jul 2006 14:10:59 +0000 (UTC)
	(envelope-from pav@FreeBSD.org)
Received: from nat-application.b1.lan.prg.vol.cz
	(nat-application.b1.lan.prg.vol.cz [195.122.204.152])
	by mx1.FreeBSD.org (Postfix) with ESMTP id BE87F43D72
	for <freebsd-www@FreeBSD.org>; Tue,  4 Jul 2006 14:10:22 +0000 (GMT)
	(envelope-from pav@FreeBSD.org)
Received: from pav.hide.vol.cz (localhost [127.0.0.1])
	by nat-application.b1.lan.prg.vol.cz (8.13.6/8.13.6) with ESMTP id
	k64EAKbl032515; Tue, 4 Jul 2006 16:10:20 +0200 (CEST)
	(envelope-from pav@FreeBSD.org)
Received: (from pav@localhost)
	by pav.hide.vol.cz (8.13.6/8.13.6/Submit) id k64EAKaB032514;
	Tue, 4 Jul 2006 16:10:20 +0200 (CEST) (envelope-from pav@FreeBSD.org)
X-Authentication-Warning: pav.hide.vol.cz: pav set sender to pav@FreeBSD.org
	using -f
From: Pav Lucistnik <pav@FreeBSD.org>
To: Joseph Koshy <joseph.koshy@gmail.com>
In-Reply-To: <84dead720607040708t7082fd4cm78fb51757949899e@mail.gmail.com>
References: <f16b1a4d0607040131h200ef706k68faf847fd996bd7@mail.gmail.com>
	<84dead720607040708t7082fd4cm78fb51757949899e@mail.gmail.com>
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
	boundary="=-nW6CswFUs1B9owWY972z"
Date: Tue, 04 Jul 2006 16:10:20 +0200
Message-Id: <1152022220.10845.58.camel@pav.hide.vol.cz>
Mime-Version: 1.0
X-Mailer: Evolution 2.6.2 FreeBSD GNOME Team Port 
Cc: freebsd-www@FreeBSD.org, Xavier <damajor@gmail.com>
Subject: Re: FreeBSD Website: Code exposed using search in French language.
X-BeenThere: freebsd-www@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: pav@FreeBSD.org
List-Id: FreeBSD Project Webmasters <freebsd-www.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-www>,
	<mailto:freebsd-www-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-www>
List-Post: <mailto:freebsd-www@freebsd.org>
List-Help: <mailto:freebsd-www-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-www>,
	<mailto:freebsd-www-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Jul 2006 14:10:59 -0000


--=-nW6CswFUs1B9owWY972z
Content-Type: text/plain; charset=ISO8859-2
Content-Transfer-Encoding: quoted-printable

Joseph Koshy p=ED=B9e v =FAt 04. 07. 2006 v 19:38 +0530:
> > The CGI perl code is exposed using the search engine in French
> > language. It seems that any kind of search even one letter
> > search can reproduce this bug.
>=20
> Switching to the French pages on www.freebsd.org and
> searching doesn't reveal the bug.  However, invoking
> search from www.fr.freebsd.org or www.de.freebsd.org
> does end up with realms of perl code being displayed.
>=20
> Apache config bug?

Mirrors usually don't run cgis.  That's known issue.
You need some extra data which are only available on the cluster for
some of those cgis.

--=20
Pav Lucistnik <pav@oook.cz>
              <pav@FreeBSD.org>

May your code work forever and never have a bug.

--=-nW6CswFUs1B9owWY972z
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: Toto je =?UTF-8?Q?digit=C3=A1ln=C4=9B?=
	=?ISO-8859-1?Q?_podepsan=E1?= =?UTF-8?Q?_=C4=8D=C3=A1st?=
	=?ISO-8859-1?Q?_zpr=E1vy?=

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (FreeBSD)

iD8DBQBEqnbMntdYP8FOsoIRAhT4AJ9oNbP6WDgTankyB21qI2weoeHQUQCbB5B5
/EPuqv1O+qo+K7KSbb95nyQ=
=ap/0
-----END PGP SIGNATURE-----

--=-nW6CswFUs1B9owWY972z--