amrita and mod_ruby

[Javier Valencia]

Have any of you run amrita on mod_ruby?

it gives me lots of "SecurityError" problems, and modifying ruby safe
level on mod_ruby config doesn't work.

I'm using now REXML, but it's a lot of code to generate a relative
simple html page.

 

[James G. Britt]

Have any of you run amrita on mod_ruby?

it gives me lots of "SecurityError" problems, and modifying ruby safe
level on mod_ruby config doesn't work.

My recollection of working with mod_ruby is that I had some issues
with tainted strings. I had to explicitly untaint or dupe strings to
get around things. (I am not advocating this though; I cannot assure
you that it won't lead to actual security issues, but I was happy when
I ran www.rubyxml.com under mod_ruby.)

I'm using now REXML, but it's a lot of code to generate a relative
simple html page.

You may do better with XMLBuilder.

James