Debian Bug report logs - #42494
lynx: new version breaks lynxexec and lynxcgi combo

version graph

Package: lynx; Maintainer for lynx is Debian Lynx Packaging Team <pkg-lynx-maint@lists.alioth.debian.org>; Source for lynx is src:lynx (PTS, buildd, popcon).

Reported by: Paul Slootman <paul@debian.org>

Date: Thu, 5 Aug 1999 09:18:00 UTC

Severity: normal

Found in version 2.8.2-1

Done: Paul Slootman <paul@wau.mis.ah.nl>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, Christian Hudon <chrish@debian.org>:
Bug#42494; Package lynx. (full text, mbox, link).

Acknowledgement sent to Paul Slootman <paul@debian.org>:
New bug report received and forwarded. Copy sent to Christian Hudon <chrish@debian.org>. (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Paul Slootman <paul@debian.org>
To: submit@bugs.debian.org
Subject: lynx: new version breaks lynxexec and lynxcgi combo
Date: Thu, 5 Aug 1999 11:10:45 +0200
Package: lynx
Version: 2.8.2-1

Short version:

a lynxexec URL generated by a lynxcgi URL refuses to run the referenced
command, with the message "Alert!: Executable link rejected due to
location or path." followed by "Alert!: Execution is not enabled for
this file.  See the Options menu (use O).".  Note that the Options menu
does not show anything that I consider relevant, but that's a different
issue.

The exact same scripts etc. work fine on slink, with lynx_2.8.1-3.  Why
did this stop working?

Long version:

I test it with the following setup:

- x.html        which has a lynxexec URL to invoke ping, and a lynxcgi
                link to a script x.cgi that generates almost the exact
                same page

- x.cgi         which has a lynxexec URL to invoke ping, and a lynxexec
                link to x.html that generates the page described above.

- x.cfg         a config file for lynx with which I tested the setup.

Invoke lynx as 'lynx -cfg=x.cfg x.html', try the `ping' link (which
works), then choose the `menu generated by cgi' link. Try the `ping'
link there which is the exact same URL as the one in x.html, and see
that it fails.

Is the problem perhaps that 2.8.2 needs an extra config parameter to
enable the previous behaviour? Is some compile-time option changed?
All I know is that I need the old behaviour back again!

The documentation for the TRUSTED_EXEC etc. options is not very clear
either; e.g. what's the function of the <tab> mentioned in some of the
examples given?

Here are the three files I use in my test setup:
--- x.html -----------------------------------------------------------
<html>
<head>
<title>test html</title>
</head>
<body>
<a href="lynxexec:ping -c 2 localhost">ping</a>
<a href="lynxcgi:/tmp/x.cgi">menu generated by cgi</a>
</body>
</html>
----------------------------------------------------------------------
--- x.cgi ------------------------------------------------------------
#!/bin/sh
cat <<EOF
Content-type: text/html

<html>
<head>
<title>test cgi</title>
</head>
<body>
<a href="lynxexec:ping -c 2 localhost">ping</a>
<a href="/tmp/x.html">html menu</a>
</body>
</html>
EOF
----------------------------------------------------------------------
-- x.cfg -------------------------------------------------------------
STARTFILE:http://www.wau.mis.ah.nl/
HELPFILE:file://localhost/usr/doc/lynx/lynx_help/lynx_help_main.html
DEFAULT_INDEX_FILE:http://www.ncsa.uiuc.edu/SDG/Software/Mosaic/MetaIndex.html
LOCAL_EXECUTION_LINKS_ALWAYS_ON:FALSE
LOCAL_EXECUTION_LINKS_ON_BUT_NOT_REMOTE:TRUE
ALWAYS_TRUSTED_EXEC:none
NNTPSERVER:janux.wau.mis.ah.nl
NO_DOT_FILES:FALSE
MINIMAL_COMMENTS:TRUE
GLOBAL_EXTENSION_MAP:/etc/mime.types
PERSONAL_EXTENSION_MAP:.mime.types
XLOADIMAGE_COMMAND:
GLOBAL_MAILCAP:/etc/mailcap
PERSONAL_MAILCAP:.mailcap
COLOR:0:lightgray:black
COLOR:1:blue:black
COLOR:2:yellow:blue
COLOR:3:green:black
COLOR:4:magenta:black
COLOR:5:blue:black
COLOR:6:red:black
COLOR:7:magenta:cyan
----------------------------------------------------------------------

Thanks,
Paul Slootman
-- 
Better, faster, | home:   paul@wurtel.demon.nl http://www.wurtel.demon.nl/
cheaper:        | debian: paul@debian.org   isdn4linux: paul@isdn4linux.de
choose any two. | work:   paul@murphy.nl    Murphy Software, Enschede,  NL

Reply sent to Paul Slootman <paul@wau.mis.ah.nl>:
You have taken responsibility. (full text, mbox, link).

Notification sent to Paul Slootman <paul@debian.org>:
Bug acknowledged by developer. (full text, mbox, link).

Message #10 received at 42494-done@bugs.debian.org (full text, mbox, reply):

From: Paul Slootman <paul@wau.mis.ah.nl>
To: 42494-done@bugs.debian.org
Subject: Re: Bug#42494: Acknowledgement (lynx: new version breaks lynxexec and lynxcgi combo)
Date: Fri, 13 Aug 1999 11:35:49 +0200
I'm closing the bug report I opened last week, I think I screwed up
somewhere as it now seems to work for me with minor adjustments to
te config file.


Paul Slootman
-- 
home: paul@wurtel.demon.nl | work: paul@murphy.nl | debian: paul@debian.org
http://www.wurtel.demon.nl | Murphy Software,   Enschede,   the Netherlands

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Mon Apr 29 08:32:16 2024; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.