prosody-hg: util/envload.lua annotate

annotate util/envload.lua @ 13127:f45a29b32f7a

mod_http: Make RFC 7239 Forwarded opt-in for now to be safe Supporting both methods at the same time may open to spoofing attacks, whereby a client sends a Forwarded header that is not stripped by a reverse proxy, leading Prosody to use that instead of the X-Forwarded-* headers actually sent by the proxy. By only supporting one at a time, it can be configured to match what the proxy uses. Disabled by default since implementations are sparse and X-Forwarded-* are everywhere.

author	Kim Alvefur <zash@zash.se>
date	Sat, 03 Jun 2023 21:53:20 +0200
parents	d1aacc6a81ac
children

rev	line source
5020 ef1eb65acbba util.envload: New module to abstract Lua 5.1's setfenv and Lua 5.2's load Florian Zeitz <florob@babelmonkeys.de> parents: diff changeset	1 -- Prosody IM
ef1eb65acbba util.envload: New module to abstract Lua 5.1's setfenv and Lua 5.2's load Florian Zeitz <florob@babelmonkeys.de> parents: diff changeset	2 -- Copyright (C) 2008-2011 Florian Zeitz
ef1eb65acbba util.envload: New module to abstract Lua 5.1's setfenv and Lua 5.2's load Florian Zeitz <florob@babelmonkeys.de> parents: diff changeset	3 --
ef1eb65acbba util.envload: New module to abstract Lua 5.1's setfenv and Lua 5.2's load Florian Zeitz <florob@babelmonkeys.de> parents: diff changeset	4 -- This project is MIT/X11 licensed. Please see the
ef1eb65acbba util.envload: New module to abstract Lua 5.1's setfenv and Lua 5.2's load Florian Zeitz <florob@babelmonkeys.de> parents: diff changeset	5 -- COPYING file in the source package for more information.
ef1eb65acbba util.envload: New module to abstract Lua 5.1's setfenv and Lua 5.2's load Florian Zeitz <florob@babelmonkeys.de> parents: diff changeset	6 --
8416 bc9cb23b604a util.envload: Ignore "undefined variable" warning for loadstring [luacheck with strict 5.2 or 5.3 checks] Kim Alvefur <zash@zash.se> parents: 7930 diff changeset	7 -- luacheck: ignore 113/setfenv 113/loadstring
5020 ef1eb65acbba util.envload: New module to abstract Lua 5.1's setfenv and Lua 5.2's load Florian Zeitz <florob@babelmonkeys.de> parents: diff changeset	8
12576 d1aacc6a81ac util.envload: Remove Lua 5.1 method Kim Alvefur <zash@zash.se> parents: 8416 diff changeset	9 local load = load;
7924 8487fe9fc335 util.envload: Open file here instead of letting loadfile do it so that all return values from io.open can be collected Kim Alvefur <zash@zash.se> parents: 7728 diff changeset	10 local io_open = io.open;
5020 ef1eb65acbba util.envload: New module to abstract Lua 5.1's setfenv and Lua 5.2's load Florian Zeitz <florob@babelmonkeys.de> parents: diff changeset	11
12576 d1aacc6a81ac util.envload: Remove Lua 5.1 method Kim Alvefur <zash@zash.se> parents: 8416 diff changeset	12 local function envload(code, source, env)
d1aacc6a81ac util.envload: Remove Lua 5.1 method Kim Alvefur <zash@zash.se> parents: 8416 diff changeset	13 return load(code, source, nil, env);
d1aacc6a81ac util.envload: Remove Lua 5.1 method Kim Alvefur <zash@zash.se> parents: 8416 diff changeset	14 end
5020 ef1eb65acbba util.envload: New module to abstract Lua 5.1's setfenv and Lua 5.2's load Florian Zeitz <florob@babelmonkeys.de> parents: diff changeset	15
12576 d1aacc6a81ac util.envload: Remove Lua 5.1 method Kim Alvefur <zash@zash.se> parents: 8416 diff changeset	16 local function envloadfile(file, env)
d1aacc6a81ac util.envload: Remove Lua 5.1 method Kim Alvefur <zash@zash.se> parents: 8416 diff changeset	17 local fh, err, errno = io_open(file);
d1aacc6a81ac util.envload: Remove Lua 5.1 method Kim Alvefur <zash@zash.se> parents: 8416 diff changeset	18 if not fh then return fh, err, errno; end
d1aacc6a81ac util.envload: Remove Lua 5.1 method Kim Alvefur <zash@zash.se> parents: 8416 diff changeset	19 local f, err = load(fh:lines(2048), "@" .. file, nil, env);
d1aacc6a81ac util.envload: Remove Lua 5.1 method Kim Alvefur <zash@zash.se> parents: 8416 diff changeset	20 fh:close();
d1aacc6a81ac util.envload: Remove Lua 5.1 method Kim Alvefur <zash@zash.se> parents: 8416 diff changeset	21 return f, err;
5020 ef1eb65acbba util.envload: New module to abstract Lua 5.1's setfenv and Lua 5.2's load Florian Zeitz <florob@babelmonkeys.de> parents: diff changeset	22 end
ef1eb65acbba util.envload: New module to abstract Lua 5.1's setfenv and Lua 5.2's load Florian Zeitz <florob@babelmonkeys.de> parents: diff changeset	23
ef1eb65acbba util.envload: New module to abstract Lua 5.1's setfenv and Lua 5.2's load Florian Zeitz <florob@babelmonkeys.de> parents: diff changeset	24 return { envload = envload, envloadfile = envloadfile };

Mercurial > prosody-hg

annotate util/envload.lua @ 13127:f45a29b32f7a