Exclude working directory from library path (CVE-2016-1238)

[git.ikiwiki.info.git] / doc / bugs / http_proxy_for_openid.mdwn

diff --git a/doc/bugs/http_proxy_for_openid.mdwn b/doc/bugs/http_proxy_for_openid.mdwn
index 28fbee02618472b5ddf89535fc6105b27a54e8b7..4a9c1b3ebbfd09f86106afeaa0ce061abc0a575c 100644 (file)
--- a/doc/bugs/http_proxy_for_openid.mdwn
+++ b/doc/bugs/http_proxy_for_openid.mdwn
@@ -68,3 +68,18 @@ Brian May
 >>> To get it to care, pass `env_proxy => 1` to the constructor. Affected
 >>> plugins: aggregate, openid, pinger. This probably wants to be on
 >>> by default, and might not need to be configurable. --[[schmonz]]
 >>> To get it to care, pass `env_proxy => 1` to the constructor. Affected
 >>> plugins: aggregate, openid, pinger. This probably wants to be on
 >>> by default, and might not need to be configurable. --[[schmonz]]

+
+>>>> Okay, in a real-world scenario it does need to be 
+>>>> configurable. A working implementation (tested with aggregate,
+>>>> not tested with the other two plugins) is in my git, commit
+>>>> 91c46819dee237a281909b0c7e65718eb43f4119. --[[schmonz]]
+
+>>>>> Oh, and according to the LWPx::ParanoidAgent docs, "proxy support is 
+>>>>> explicitly removed", so if ikiwiki can preferentially find that 
+>>>>> installed, even with the above commit, `openid` won't be able to 
+>>>>> traverse a proxy. --[[schmonz]]
+
+[[!template id=gitbranch branch=schmonz/proxy author="[[schmonz]]"]]
+
+>>>>>> I've redone this from scratch, much more simply, on a new
+>>>>>> branch. --[[schmonz]].