Re: MP1 Security issue (was Re: [mp1] PerlRun fails if path_info contains special symbols)

["Alex Solovey" <suppressed>]

On 3/23/07, Geoffrey Young <suppressed> wrote:
> as for mp2, nothing in the current distribution is affected -
> ModPerl::Registry and ModPerl::PerlRun are both filesystem based and not
> uri based.  however, if you use RegistryCooker to roll your own
> non-standard Registry handler and are using the non-standard uri-based
> methods then you will want to examine your code.

Indeed, default mp2 setup is not affected. One cannot reproduce this
problem unless something like
  *ModPerl::MyRegistry::namespace_from =
\&ModPerl::RegistryCooker::namespace_from_uri;
is done.

-- Alex