Comments on: Sinatra routing options

By: admin

admin — Thu, 07 Jan 2010 16:19:48 +0000

From a superficial inspection, your solution looks to do the same thing as mine, with much less mucking around.

Looking at it, there’s probably a security issue if you use it as a reference to a file on the file system, but otherwise it’d be fine. (think of somebody going to /archive/../../../../../../../etc/passwd or whatever).

By: klappy

klappy — Thu, 07 Jan 2010 15:24:34 +0000

as far as handling the full subfolders is there any downside to a this simple approach?
is there a security vulnerability that i am missing?

get ‘/:toplevel/*’ do
splat = params[:splat].join(‘/’)
splat
end

By: Clifford Heath

Clifford Heath — Wed, 20 May 2009 04:24:32 +0000

Actually for the subfolders, you can now use a Regexp, or anything that responds to =~ in fact, as long as it doesn’t also respond to to_str