Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

This project is archived and is in readonly mode.

Insecure mongrel_rails invocation, unable to use "system" mongrel

#934

This patch fixes two issues:

Using backticks is insecure, use Process::exec method in multiple argument form when "-d" option given.

load("mongrel_rails") fails if mongrel is not installed from gem, try CONFIG['bindir'] if at first we don't succeed.

Reported by Alexey I. Froloff · August 29th, 2008 @ 05:25 PM

State: wontfix
Milestone: 2.x
Assigned to: nobody
Importance: none

Activity

  1. josh
    josh
    • State changed from new to wontfix

    the script/server will soon be replaced by a rackup command that won't use any system calls.

    November 22nd, 2008 @ 06:25 PM