[racket] Embedded web server in handin-server: Illegal file access

From: Eli Barzilay (eli at barzilay.org)
Date: Sun Jan 25 22:08:47 EST 2015

The embedded web server has a check that a file access is OK: either
it's a file that the current user "owns" (in their submission
directory), or it's a solution file or a file in a solution directory
(you can see it from line 203 in "web-status-server.rkt").

But there could also be an error further down that code -- you can't
tell from the (intentionally) generic failure page, or from the web log
file.  Instead, look in the regular handin log, and it should show some
error following a "Status exception".

On Fri, Jan 23, 2015 at 11:20 AM, Suzanne Menzel <menzel at indiana.edu> wrote:
> Hello,
>
> I’m running the embedded web server for handin-server. It is not allowing access to the submitted files. The links are present, but clicking on any one directs to an Error page with the message “Illegal file access”. Here are the entries in the web log:
>
> 50.240.134.234 - - [23/Jan/2015:11:18:39 -0500] "GET /favicon.ico HTTP/1.1" - -
> 50.240.134.234 - - [23/Jan/2015:11:18:42 -0500] "GET /;((%22k%22%20.%20%22(871%203%2082419214)%22))?tag=..%2F..%2F..%2F..%2F..%2F..%2Fu%2Fc211%2Fspring15%2Fhandin-server%2Flab2%2Fmenzel%2Flab2.rkt&mode=download HTTP/1.1" - -
>
> Any suggestions on how to fix this?
>
> Suzanne
>
>
> ____________________
>   Racket Users list:
>   http://lists.racket-lang.org/users



-- 
          ((lambda (x) (x x)) (lambda (x) (x x)))          Eli Barzilay:
                    http://barzilay.org/                   Maze is Life!


Posted on the users mailing list.