Group :: Desenvolvimento/Perl
RPM: perl-LWPx-ParanoidAgent
Principal Changelog Spec Patches Sources Download Gear Bugs e FR Repocop
A versão atual: 1.03-alt1
Data da compilação: 18 novembro 2006, 18:27 ( 912.0 weeks ago )
Tamanho:: 16.63 Kb
Home page: http://www.annocpan.org/dist/LWPx-ParanoidAgent
Licença: Artistic
Sumário: subclass of LWP::UserAgent that protects you from harm
Descrição:
Lista dos contribuidores Lista dos rpms provida por esta srpm:
ACL:
Data da compilação: 18 novembro 2006, 18:27 ( 912.0 weeks ago )
Tamanho:: 16.63 Kb
Home page: http://www.annocpan.org/dist/LWPx-ParanoidAgent
Licença: Artistic
Sumário: subclass of LWP::UserAgent that protects you from harm
Descrição:
The "LWPx::ParanoidAgent" is a class subclassing "LWP::UserAgent",
but paranoid against attackers. It's to be used when you're fetching
a remote resource on behalf of a possibly malicious user.
This class can do whatever "LWP::UserAgent" can (callbacks, uploads from
files, etc), except proxy support is explicitly removed, because in
that case you should do your paranoia at your proxy.
Also, the schemes are limited to http and https, which are mapped to
"LWPx::Protocol::http_paranoid" and
"LWPx::Protocol::https_paranoid", respectively, which are forked
versions of the same ones without the "_paranoid". Subclassing them
didn't look possible, as they were essentially just one huge function.
This class protects you from connecting to internal IP ranges (unless you
whitelist them), hostnames/IPs that you blacklist, remote webserver
tarpitting your process (the timeout parameter is changed to be a global
timeout over the entire process), and all combinations of redirects and
DNS tricks to otherwise tarpit and/or connect to internal resources.
Mantenedor currente: Vitaly Lipatov but paranoid against attackers. It's to be used when you're fetching
a remote resource on behalf of a possibly malicious user.
This class can do whatever "LWP::UserAgent" can (callbacks, uploads from
files, etc), except proxy support is explicitly removed, because in
that case you should do your paranoia at your proxy.
Also, the schemes are limited to http and https, which are mapped to
"LWPx::Protocol::http_paranoid" and
"LWPx::Protocol::https_paranoid", respectively, which are forked
versions of the same ones without the "_paranoid". Subclassing them
didn't look possible, as they were essentially just one huge function.
This class protects you from connecting to internal IP ranges (unless you
whitelist them), hostnames/IPs that you blacklist, remote webserver
tarpitting your process (the timeout parameter is changed to be a global
timeout over the entire process), and all combinations of redirects and
DNS tricks to otherwise tarpit and/or connect to internal resources.
Lista dos contribuidores Lista dos rpms provida por esta srpm:
- perl-LWPx-ParanoidAgent