Roxen.git/ server/ base_server/ configuration.pike

2002-05-16

2002-05-16 12:28:41 by Stefan Wallström <stewa@roxen.com>

• 483b06c6753240a096045c35a63c4b92249ee93b (17 lines) (+15/-2) ^{[ Show | Annotate ]}
  Branch: 5.2

Added a subrequest limit to protect from infinite insertion loops.

Rev: server/base_server/configuration.pike:1.513

5:   // @appears Configuration   //! A site's main configuration    - constant cvs_version = "$Id: configuration.pike,v 1.512 2002/05/13 15:55:44 jonasw Exp $"; + constant cvs_version = "$Id: configuration.pike,v 1.513 2002/05/16 12:28:41 stewa Exp $";   #include <module.h>   #include <module_constants.h>   #include <roxen.h>
1737:    TIMER_START(get_file);    int orig_internal_get = id->misc->internal_get;    id->misc->internal_get = internal_get; +  RequestID root_id = id->root_id || id; +  int sub_req_limit = query("SubRequestLimit"); +  root_id->misc->_request_depth++; +  if(sub_req_limit && root_id->misc->_request_depth > sub_req_limit) +  throw( ({ "Subrequest limit reached. (Possibly an insertion loop.)", backtrace() }) );       mapping|int res;    mapping res2;
1764:    }    TIMER_END(filter_modules);    +  root_id->misc->_request_depth--;    id->misc->internal_get = orig_internal_get;    return res;   }
3463:    "a location that you are not likely to use for regular "    "resources."));    +  defvar("SubRequestLimit", 30, +  "Subrequest depth limit", +  TYPE_INT | VAR_MORE, +  "A limit for the number of nested sub requests for each request. " +  "This is intented to catch unintended infinite loops when for example " +  "inserting files in RXML. 0 for no limit." );       // Throttling-related variables