On Wed, Jul 21, 2004 at 08:26:04PM +0200, Zenon Panoussis wrote:
> 
> Toad wrote:
> 
> >>Is there a list somewhere of the query strings used?
> 
> >For fproxy:
> 
> >?key=<key>
> >?htl=<number>
> >?linkhtl=<number>
> >?mime=<mime type>
> >?date=<date>
> >?rdate=<true|false>
> >?force=<short hex cookie>
> 
> >Probably there are more for the splitfile servlet.
> 
> I was trying to block access to ?setSimpleAdvancedMode=<mode>,
> but also anticipating the existence of query strings that might
> do things I wouldn't want the public to be doing. By what you
> list here, I don't see the harm in removing the query string
> filter altogether, but better ask: would that open any abuse
> avenues, as fas as you can see?

?setSimpleAdvancedMode is the obvious one. It depends what bugs there
are in publicNode=true. In theory, publicNode=true alone should provide
reasonable protection.
-- 
Matthew J Toseland - [EMAIL PROTECTED]
Freenet Project Official Codemonkey - http://freenetproject.org/
ICTHUS - Nothing is impossible. Our Boss says so.

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Support mailing list
[EMAIL PROTECTED]
http://news.gmane.org/gmane.network.freenet.support
Unsubscribe at http://dodo.freenetproject.org/cgi-bin/mailman/listinfo/support
Or mailto:[EMAIL PROTECTED]

Reply via email to