Welcome! Log In Create A New Profile

Advanced

Re: Strange advisory

B.R.
May 13, 2014 09:46AM
Thanks to both of you for precisions about your point of view.

Having thought more about it, it seems indeed strane to *interpret* log
file content to *execute* script snippet in order to change window title or
alike, following the link Kurt provided.
It seems that old-fahion habits have taken advantage of backward-compatible
features in modern emulated terminals.

Switching to the fa that emulator vendors should correct this, who to
contact for it? I suppose it has nothing to do with the kernel, but rather
with multiple GNU libraries around it.
---
*B. R.*


On Tue, May 13, 2014 at 10:22 AM, Valentin V. Bartenev <vbart@nginx.com>wrote:

> On Sunday 11 May 2014 06:25:53 B.R. wrote:
> [..]
> > What is the benefit of having those unescaped control characters in a log
> > file? Escaping them allows you to warn about their presence safely... and
> > that is directly exploitable by anything, once again safely.
>
> The benefit is that you can easily find in error/debug log exactly what
> a client has sent with binary precision, and therefore better diagnose
> a problem. And this actually is the main purpose of error log (normally
> it's just empty).
>
> wbr, Valentin V. Bartenev
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Strange advisory

B.R. May 10, 2014 03:02PM

Re: Strange advisory

x64architecture May 10, 2014 03:42PM

RE: Strange advisory

Lukas Tribus May 10, 2014 03:46PM

Re: Strange advisory

B.R. May 11, 2014 12:28AM

Re: Strange advisory

itpp2012 May 11, 2014 05:12AM

Re: Strange advisory

Valentin V. Bartenev May 13, 2014 04:24AM

Re: Strange advisory

B.R. May 13, 2014 09:46AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 145
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready