XSSFilter could not parse (X)HTML:
<p>From yuri at sims.berkeley.edu Fri Jul 25 19:07:54 2008
From: yuri at sims.berkeley.edu (Yuri Takhteyev)
Date: Fri Jul 25 19:18:25 2008
Subject: [Kepler-Project] Fwd: [Sputnik-list] Bug in sputnik +</p>
<pre><code>xavante/wsapi
</code></pre>
<p>In-Reply-To: <a href="mailto:7913df4d0807251057x2d892f34l423414d0b149e660@mail.gmail.com">7913df4d0807251057x2d892f34l423414d0b149e660@mail.gmail.com</a>
References: <a href="mailto:20080717134733.GA15636@birba">20080717134733.GA15636@birba</a></p>
<pre><code><7913df4d0807180729h2d6c53abo4a3460ace8e41ab1@mail.gmail.com>
<7913df4d0807251057x2d892f34l423414d0b149e660@mail.gmail.com>
</code></pre>
<p>Message-ID: <a href="mailto:fa4efbc00807251407j1377d43ave0813508611e15c7@mail.gmail.com">fa4efbc00807251407j1377d43ave0813508611e15c7@mail.gmail.com</a></p>
<p>On Fri, Jul 25, 2008 at 10:57 AM, Fabio Mascarenhas <a href="mailto:mascarenhas@acm.org">mascarenhas@acm.org</a> wrote:</p>
<blockquote>
<p>Oops, forgot to "Reply to all" when sending this... Lua scripts and Lua
pages get a global environment for themselves in every request, but WSAPI
applications do not, so any global you set can potentially stick around to
the next request.</p>
</blockquote>
<p>I think persisting state between requests is a good thing, as long as
there is a way to control what's going on. I tried a variation on
http://metalua.luaforge.net/src/lib/strict.lua.html, but the only
found a few globals in Sputnik, which I fixed. (BTW, there are also
two globals in wsapi.ringer: "main<em>func" and "main</em>coro" - are those
intentional?)</p>
<p>However, globals aren't really our problem here, I think. There is
tons of state that is carried by the local "my<em>sputnik" inside
new</em>wsapi<em>run</em>fn(), an also potentially in module variables. (Is
there a good way to control the creation of those?)</p>
<blockquote>
<blockquote>
<p>The bug is easy to reproduce on my setup, just edit a page (like the
configuration file) and change the main colour of sputnik... The
modification does not apply, repeatedly reloading the page gives
sometimes the expected result (the new color shows up) but not always,
while restarting xavante or touching sputnik.ws makes the modification
"stable". The bug is even nastries sometimes, since realoding may lead
the user to loose autentication (like if it was reusing a previous state
in which the user had not log in yet...).</p>
</blockquote>
</blockquote>
<p>In case of colors, the problem turns out to be quite simple: the
config node is loaded once, when "sputnik" object is created. So,
this issue is specific to editing sputnik/config, etc. Rather than
trying to detect if those files changed, I am thinking it might make
more sense to add an explicit way to reload the state. So, I added a
new action ".reload", accessible only to admin, which forces
re-initialization of Sputnik. So, after editing sputnik/config,
access sputnik/config.reload (or, actually, <any_node>.reload). The
new settings will then be applied to the <em>next</em> request.</p>
<p>With this change we are ok with CGI and Xavante. With fcgi, however,
we've got an issue, potentially, since we might have multiple
processes, and the change in configuration would apply to only one of
them. Not sure if there is any easy solution for this.</p>
<p>As for the authentication issue: we saw this one before, and I was
pretty sure we fixed it. At least, I can't seem to reproduce it.
What version are you using?</p>
<ul>
<li>yuri</li>
</ul>
<p>--
http://sputnik.freewisdom.org/</p>
<p>From gareuselesinge at libero.it Fri Jul 25 19:21:24 2008
From: gareuselesinge at libero.it (Enrico Tassi)
Date: Fri Jul 25 19:32:01 2008
Subject: [Kepler-Project] Fwd: [Sputnik-list] Bug in sputnik +</p>
<pre><code>xavante/wsapi
</code></pre>
<p>In-Reply-To: <a href="mailto:fa4efbc00807251407j1377d43ave0813508611e15c7@mail.gmail.com">fa4efbc00807251407j1377d43ave0813508611e15c7@mail.gmail.com</a>
References: <a href="mailto:20080717134733.GA15636@birba">20080717134733.GA15636@birba</a></p>
<pre><code><7913df4d0807180729h2d6c53abo4a3460ace8e41ab1@mail.gmail.com>
<7913df4d0807251057x2d892f34l423414d0b149e660@mail.gmail.com>
<fa4efbc00807251407j1377d43ave0813508611e15c7@mail.gmail.com>
</code></pre>
<p>Message-ID: <a href="mailto:20080725212123.GA5950@birba">20080725212123.GA5950@birba</a></p>
<p>On Fri, Jul 25, 2008 at 02:07:54PM -0700, Yuri Takhteyev wrote:</p>
<blockquote>
<p>On Fri, Jul 25, 2008 at 10:57 AM, Fabio Mascarenhas <a href="mailto:mascarenhas@acm.org">mascarenhas@acm.org</a> wrote:
As for the authentication issue: we saw this one before, and I was
pretty sure we fixed it. At least, I can't seem to reproduce it.
What version are you using?</p>
</blockquote>
<p>I was using 8.07.07. </p>
<p>Cheers
--
Enrico Tassi</p>