Show text.html syntax highlighted
% # vim: set syntax=mason:
<%args>
$file => -1
$sanitize => 0
</%args>
<%init>
my ($user, $prefix);
eval {
$user = Apache2::SiteControl->getCurrentUser($r);
$prefix = $config->getScratchDir($user);
};
if($@) {
$logger->error("Unable to get attachment: $@");
$m->redirect(build_url("$base/mail/index.html", { message => "Request failed" }));
}
my $folder = $user->getAttribute('reading_folder');
my $uid = $user->getAttribute('reading_uid');
my $uidv = $user->getAttribute('reading_uidv');
my $sorted_offset = $user->getAttribute('reading_offset');
my $sortby = $user->getAttribute('reading_sortby');
my $username = $user->getUsername();
$file =~ s/\\/\\\\/g; # Un-escape escapes
if($file == -1) {
$m->redirect(build_url("$base/mail/index.html", { message => "No filename for attachment." }));
} elsif($file =~ m!(^|/)\.\./!) {
$logger->error("Security Violation! $username attempted to view $file. Prefix was $prefix");
$m->redirect(build_url("$base/mail/index.html", { message => "Security violation on filename $file" }));
}
$r->content_type('text/html');
open DATA, "<$prefix/$file" or die "Could not open file $prefix/$file";
my @lines = <DATA>;
close(DATA);
{ local $" = "";
$m->print(qq(<html><body bgcolor="white"><pre>\n@lines</pre></body></html>));
}
</%init>
<%once>
our $logger = Log::Log4perl->get_logger('alphamail');
our $base = $config->get('base_uri');
</%once>
See more files for this project here