X-Git-Url: http://git.shiar.nl/sheet.git/blobdiff_plain/94952046ef8b8676384fb294ecc6fc50dccc3d6b..f291602d62f584128349e17e1fd0163c946189ab:/source.plp diff --git a/source.plp b/source.plp index 9c18320..b586dbe 100644 --- a/source.plp +++ b/source.plp @@ -29,7 +29,7 @@ if ($source =~ s{(?<=\Q.inc.pl\E)/jsonp?$}{} and -r $source) { Html({ title => "$source source code", - version => '1.2', + version => '1.3', description => !$source ? 'Index of source files for this site.' : [ "Source code of the $source file at this site,", "with syntax highlighted and references linked." @@ -43,13 +43,18 @@ Html({ say ''; -if (not $source) { - print "

Source files

"; +if (not $source or -d $source) { + PLP_START { + print "

Source files

"; + }; + + if ($source and $source ne 'tools') { + Abort("Directory index not permitted", '403 source not allowed'); + } print "

Project code distributed under the AGPL. Please contribute back.

"; say '\n"; @@ -60,6 +65,7 @@ else { say "

Source of $href

"; }; + my $path = $source; if ($source =~ m{(?:/|^)\.}) { Abort("File request not permitted", '403 source not allowed'); } @@ -67,20 +73,21 @@ else { $source .= '.pm'; for (0 .. $#INC) { -e ($_ = "$INC[$_]/$source") or next; - $source = $_; + $path = $_; last; } } - -r $source or Abort("Requested file not found", '404 source not found'); - my $size = (stat $source)->[7]; + -r $path or Abort("Requested file not found", '404 source not found'); + my $size = (stat $path)->[7]; my $cachefile = "source/$source.html"; - if (-e $cachefile and (stat $cachefile)->[9] >= (stat $source)->[9]) { + if (-e $cachefile and (stat $cachefile)->[9] >= (stat $path)->[9]) { say '
';
 		print ReadFile($cachefile);
 		say '
'; exit; } + -e or mkdir for $cachefile =~ s{[^/]+\z}{}r; # dirname open my $cache, '>', $cachefile or Alert("Could not save cache", "Opening $cachefile failed: $!");; @@ -91,7 +98,7 @@ else { or die 'early versions are buggy under FastCGI'; delete $Text::VimColor::SYNTAX_TYPE{Underlined}; return Text::VimColor->new( - file => $source, + file => $path, vim_options => [@Text::VimColor::VIM_OPTIONS, '+:set enc=utf-8'], )->marked; }) { @@ -127,7 +134,7 @@ else { } else { say '
';
-		print EscapeHTML(decode_utf8(ReadFile($source)));
+		print EscapeHTML(decode_utf8(ReadFile($path)));
 		say '
'; }