From: Ian Macdonald <ian@...>
Date: 2003-05-30T17:32:13+09:00
Subject: output redirection within mod_ruby

Hi,

I have a script that runs under mod_ruby with Apache 2.0.40. At a
certain point, it needs to invoke Kernel.system. For reasons of
security, I pass this method multiple arguments, so that it doesn't hand
off the whole thing to the shell, as then I'd need to worry about
sanitising the tainted data.

Unfortunately, the output of the binary called by system does not get
sent to the browser, even though the binary sends its output to stdout.
Presumably, mod_ruby is discarding the output.

Is there any way around this phenomenon? I don't want to have to use
backticks for the same security consideration mentioned above.

Ian
-- 
Ian Macdonald               | Ah, but a man's grasp should exceed his
System Administrator        | reach,  Or what's a heaven for ?   --
ian@caliban.org             | Robert Browning, "Andrea del Sarto" 
http://www.caliban.org      | 
                            |