Re: is it possible to modify the body of a http post using a input filter?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 12 Jun 2011, at 21:15, Edward Bailey wrote:

> ##########################################
> 
>  ExtFilterDefine route mode=input intype=text/xml cmd="/bin/sed s/<CustomerId>001500<\/CustomerId>/<CustomerId>001500<\/CustomerId><customerId>001500<\/customerId>/g"

Not sure OTTOMH if that should work.  But using the same expression
with mod_sed would certainly be a far better solution.

> <Directory />

Now that's badly wrong.  You're exposing your entire filesystem
(GOTO security 101) while at the same time probably not configuring
the filter to apply to your application.  You should configure the filter
(mod_sed) in the same scope (likely a <Location>) as the handler
for your application.

-- 
Nick Kew

Available for work, contract or permanent
http://www.webthing.com/~nick/cv.html


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx




[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux