Re: hardening window against NewsBruiser



<quote who="Owen Taylor">

> If someone wants to investigate further, what I'd suggest is:
> 
>  - Do it on a different machine, not on gnome.org (though if it is
>    old-Apache buginess, that could be a problem for reproduction.)
> 
>  - Write a simple Python cgi that a) logs when it is called b)
>    returns a small amount of data with content type and content
>    length.
> 
>  - Try to get it's results cached via the memory cache.

Different tack: Patch NB to serve public attachments statically, avoiding
the whole issue. At that point, you won't even need the memory cache (in
most cases) because Apache will be doing the work for you.

- Jeff

-- 
linux.conf.au 2006: Dunedin, New Zealand               http://linux.conf.au/
 
  "NASCAR is not race per se. It's just a contest about who can turn left
                            the best." - Unknown



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]