bugGNU nano - Bugs: bug #30749, [Request] allow suppressing the...

 
 

bug #30749: [Request] allow suppressing the creation of .save files

Submitted by:  Ren Lawrence <renlawrence>
Submitted on:  Wed Aug 11 15:21:20 2010  
 
Severity: 1 - WishStatus: None
Assigned to: NoneOpen/Closed: Open

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue Jun 21 18:01:26 2016, comment #4:

I don't quite see what the problem with creating .save files is. 1) Directly editing a live site means taking risks. 2) Having the directory open so that users can see what files are there shouldn't be done either. (Or do you think some people would scower the internet, typing .save after every URL they can think of, hoping to find a file that was edited with nano and during which editing nano crashed? And that they then study this .save file hoping to find weaknesses in the PHP or other script that it contains?)

Anyway, the permission bits are okay. And it really is a problem of Apache that it does not treat/serve some files properly. But... granted, not wanting to have these .save files popping up unrequested is a legitimate wish. So I am changing the bug's title to that effect.

Benno Schulenberg <bens>
Project Administrator
Tue Aug 17 17:35:55 2010, comment #3:

Hey Ren,

Oh, do you mean that we are not properly saving the execute bit when writing a .save file? That we may be able to fix if so, I'll check it out when I get home.

Chris Allegretta <astyanax>
Project Administrator
Wed Aug 11 15:39:40 2010, comment #2:

Although it may still be an issue for languages other than PHP.

I noticed .pl.save is served as plain-text by default.

Ren Lawrence <renlawrence>
Wed Aug 11 15:29:35 2010, comment #1:

Please disregard this ticket. I am wrong.

Anything with the suffix .php.save will still be executed and served properly.

Ren Lawrence <renlawrence>
Wed Aug 11 15:21:20 2010, original submission:

This is not necessarily a bug or even something that you should be responsible to change.

However, I thought it was worth bringing to your attention that the default behavior of Apache will serve any .save files as plain-text. Often these are source files of interpreted languages.

A quick Google search of "filetype:save php" will show you the severity of this problem.

Apache can easily be configured to not serve .save files, but I am worried that many users would not know about nano's emergency feature to dump the buffer to .save files.

My suggestion would be the ability to configure this feature to be on or off, with a default setting of off. The ability to configure the emergency dump suffix would also be useful.

Ren Lawrence <renlawrence>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by bens (Posted a comment)
  • -unavailable- added by astyanax (Posted a comment)
  • -unavailable- added by renlawrence (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 6 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue Jun 21 18:01:26 2016bensSeverity3 - Normal=>1 - Wish
      StatusIn Progress=>None
      Assigned toastyanax=>None
      Summary.save files are served as plain-text by Apache web servers=>[Request] allow suppressing the creation of .save files
    Tue Aug 17 17:35:55 2010astyanaxStatusNone=>In Progress
      Assigned toNone=>astyanax

    Back to the top


    Powered by Savane 3.1-cleanup