Apr 17

Minor bug with Sybase’s Workspace 1.7 regarding directories starting with a ‘.’

Apache, Mason, Perl, Sybase, Workspace No Comments »

I’ve been using Sybase’s Workspace 1.7 for developing and maintaining a myriad of maintenance scripts, web pages, and other interesting things.  I ran into an interesting issue that is worthwhile to take note:
In most of the 3rd party plugins, the .components directory properly shows up in their perspectives.  For example, the EPIC plugin shows the .components directory in the project with no problems.
The EPIC Perl module's perspective shows the

None of Sybase’s eclipse plugins show the .components directory.  I believe this is based on the assumption that since Workspace only runs on windows, that dot directories are rare or nonexistent.  This is a minor bug but one that people should be aware of in case you think that Workspace ate your directory.  ;-)
Any of the Sybase plugin Perspectives don't include the .components directory.

Listen to this podcast Listen to this podcast
Sep 12

Apache 2, mod_perl 2 and security (Apache2::Const)

Apache, Perl, mod_perl No Comments »

Problem:

I want to send a 404 (not found) error back to the browser when any ".*" or "*.mas" or "*handler" files are requested.  The example in the Mason book is for mod_perl v1 and so far, I haven’t been able to find a working example of how to send the 404 return code using Apache2::Const in an apache .conf file.

This wasn’t a small issue because it was a security hole that may have allowed for the viewing of the web page code and/or sensitive information.

Solution (/etc/httpd/conf.d/perl-HTML-Mason.conf):

<FilesMatch "(\.mas|handler)$">
    SetHandler perl-script
    PerlResponseHandler "sub { use Apache2::Const qw(NOT_FOUND); return NOT_FOUND }"
</FilesMatch>

<FilesMatch "^(\.)">
    SetHandler perl-script
    PerlResponseHandler "sub { use Apache2::Const qw(NOT_FOUND); return NOT_FOUND }"
</FilesMatch>

Notice that the Apache2::Const perl module is loaded in the anonymous subroutine and not preloaded.  Apparently mod_perl 2 doesn’t allow for Apache2::Const to be preloaded in the apache config file.

Listen to this podcast Listen to this podcast
WP Theme & Icons by N.Design Studio
Entries RSS Comments RSS Log in
Close
E-mail It