httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Edward Bailey <eds.mailing.list.acco...@gmail.com>
Subject Re: [users@httpd] is it possible to modify the body of a http post using a input filter?
Date Sun, 12 Jun 2011 21:08:09 GMT
Ok - I will give mod_sed a try though I will have to compile it. Hopefully
it will work in the version of apache. Yeah - i thought that was a bad idea
though putting the config in <Location> did not work either.

Thanks

Ed

On Sun, Jun 12, 2011 at 4:48 PM, Nick Kew <nick@webthing.com> wrote:

>
> On 12 Jun 2011, at 21:15, Edward Bailey wrote:
>
> > ##########################################
> >
> >  ExtFilterDefine route mode=input intype=text/xml cmd="/bin/sed
> s/<CustomerId>001500<\/CustomerId>/<CustomerId>001500<\/CustomerId><customerId>001500<\/customerId>/g"
>
> Not sure OTTOMH if that should work.  But using the same expression
> with mod_sed would certainly be a far better solution.
>
> > <Directory />
>
> Now that's badly wrong.  You're exposing your entire filesystem
> (GOTO security 101) while at the same time probably not configuring
> the filter to apply to your application.  You should configure the filter
> (mod_sed) in the same scope (likely a <Location>) as the handler
> for your application.
>
> --
> Nick Kew
>
> Available for work, contract or permanent
> http://www.webthing.com/~nick/cv.html
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

Mime
View raw message