💾 Archived View for capsule.usebox.net › gemlog › 20210901-spacebeans-1-3.gmi captured on 2024-05-12 at 15:05:05. Gemini links have been rewritten to link to archived content
⬅️ Previous capture (2021-11-30)
-=-=-=-=-=-=-
Posted Wed 1 Sep, 2021.
I have just released SpaceBeans v1.3.0, that includes an important fix if you are using a CGI as index file.
The bug was triggered by requesting a directory when an index file was found, and the index file was a CGI (being CGIs allowed for that directory, etc). That index was always served as document instead of being executed. This is a bad one, because it could lead to information disclosure by sending the CGI code to the client instead of its output.
Anyone using SpaceBeans v1.2.0 with the CGI functionality should upgrade to V1.3.0. This new version can be found in the usual places:
The other change in this release is a new configuration token per virtual host to provide extra environment variables for CGIs, which allowed me to make some changes in Cherrygrove City Pokemon Center to support UTF-8 in Python 3 (it needs PYTHONIOENCODING=utf-8 to function properly). So now I can write "Pokémon" \o/.
Cherrygrove City Pokémon Center with extra utf-8
I plan to make a couple of improvements on the CGI and it will be ready to release as Open Source. Exciting!