cherry-pick uri security fix

[git.ikiwiki.info.git] / doc / bugs / CGI_problem_with_some_webservers.mdwn

diff --git a/doc/bugs/CGI_problem_with_some_webservers.mdwn b/doc/bugs/CGI_problem_with_some_webservers.mdwn
index 32ec5cca171417aa3713e0e196519ddc600eefd5..1b09608c6c5b380c95f22a3caae7597a99b9ee38 100644 (file)
--- a/doc/bugs/CGI_problem_with_some_webservers.mdwn
+++ b/doc/bugs/CGI_problem_with_some_webservers.mdwn
@@ -57,3 +57,13 @@ Why do they appear two times with conflicting values in the very same hashes?
 >> rather that create it.
 
 >> --[[JeremieKoenig]]
 >> rather that create it.
 
 >> --[[JeremieKoenig]]

+
+>>> If thttpd and mini-httpd interpret CGI's stderr as stdout, then
+>>> they're not properly following the CGI spec, and will break with tons
+>>> of cgi scripts besides ikiwiki. And of course there are many many cases
+>>> where ikiwiki might output to stderr, and that's the right thing to do.
+>>> So I don't see any way to address this in ikiwiki. --[[Joey]]
+
+>>>> (reported as [[debbug 437927]] and [[debbug 437932]]) --[[JeremieKoenig]]
+
+Marking [[done]] since it's not really an ikiwiki bug. --[[Joey]]