Пакет perl-LWPx-ParanoidAgent: Информация
Исходный пакет: perl-LWPx-ParanoidAgent
Версия: 1.07-alt1
Собран: 7 ноября 2009 г. 12:50
Категория: Разработка/Perl
Сообщить об ошибке в пакетеДомашняя страница: http://www.annocpan.org/dist/LWPx-ParanoidAgent
Лицензия: Artistic
О пакете: subclass of LWP::UserAgent that protects you from harm
Описание:
The "LWPx::ParanoidAgent" is a class subclassing "LWP::UserAgent", but paranoid against attackers. It's to be used when you're fetching a remote resource on behalf of a possibly malicious user. This class can do whatever "LWP::UserAgent" can (callbacks, uploads from files, etc), except proxy support is explicitly removed, because in that case you should do your paranoia at your proxy. Also, the schemes are limited to http and https, which are mapped to "LWPx::Protocol::http_paranoid" and "LWPx::Protocol::https_paranoid", respectively, which are forked versions of the same ones without the "_paranoid". Subclassing them didn't look possible, as they were essentially just one huge function. This class protects you from connecting to internal IP ranges (unless you whitelist them), hostnames/IPs that you blacklist, remote webserver tarpitting your process (the timeout parameter is changed to be a global timeout over the entire process), and all combinations of redirects and DNS tricks to otherwise tarpit and/or connect to internal resources.
Сопровождающий: Vitaly Lipatov
Последнее изменение
7 ноября 2009 г. Vitaly Lipatov 1.07-alt1
- new version 1.07 (with rpmrb script)
6 сентября 2008 г. Vitaly Lipatov 1.03-alt2
- fix directory ownership violation - disable test - disableperl packaging
18 ноября 2006 г. Vitaly Lipatov 1.03-alt1
- initial build for ALT Linux Sisyphus