X-Git-Url: http://git.shiar.nl/sheet.git/blobdiff_plain/94952046ef8b8676384fb294ecc6fc50dccc3d6b..140051e24ff5a74421e8b437cdc12ca8570995cd:/source.plp

diff --git a/source.plp b/source.plp
index 9c18320..b10f38b 100644
--- a/source.plp
+++ b/source.plp
@@ -43,13 +43,18 @@ Html({
 
 say '';
 
-if (not $source) {
-	print "<h1>Source files</h1>";
+if (not $source or -d $source) {
+	PLP_START {
+		print "<h1>Source files</h1>";
+	};
+
+	if ($source and $source ne 'tools') {
+		Abort("Directory index not permitted", '403 source not allowed');
+	}
 
 	print "<p>Project code distributed under the AGPL. Please contribute back.</p>";
 	say '<ul>';
-	for (glob '*.plp') {
-		chomp;
+	for (glob($source ? "$source/*" : '*.plp')) {
 		say '<li>', showlink($_, "/source/$_");
 	}
 	say "</ul>\n";
@@ -81,6 +86,7 @@ else {
 		say '</pre>';
 		exit;
 	}
+	-e or mkdir for $cachefile =~ s{[^/]+\z}{}r; # dirname
 	open my $cache, '>', $cachefile
 		or Alert("Could not save cache", "Opening $cachefile failed: $!");;