| Name : perl-LWPx-ParanoidAgent
| |
| Version : 1.07
| Vendor : Dag Apt Repository, http://dag_wieers_com/apt/
|
| Release : 1.el6.rf
| Date : 2010-11-12 08:41:46
|
| Group : Applications/CPAN
| Source RPM : perl-LWPx-ParanoidAgent-1.07-1.el6.rf.src.rpm
|
| Size : 0.04 MB
| |
| Packager : Steve Huff < shuff_vecna_org>
| |
| Summary : subclass of LWP::UserAgent that protects you from harm
|
Description :
The LWPx::ParanoidAgent is a class subclassing LWP::UserAgent, but paranoid
against attackers. It\'s to be used when you\'re fetching a remote resource on
behalf of a possibly malicious user.
This class can do whatever LWP::UserAgent can (callbacks, uploads from files,
etc), except proxy support is explicitly removed, because in that case you
should do your paranoia at your proxy.
Also, the schemes are limited to http and https, which are mapped to
LWPx::Protocol::http_paranoid and LWPx::Protocol::https_paranoid, respectively,
which are forked versions of the same ones without the \"_paranoid\". Subclassing
them didn\'t look possible, as they were essentially just one huge function.
This class protects you from connecting to internal IP ranges (unless you
whitelist them), hostnames/IPs that you blacklist, remote webserver tarpitting
your process (the timeout parameter is changed to be a global timeout over the
entire process), and all combinations of redirects and DNS tricks to otherwise
tarpit and/or connect to internal resources.
|
RPM found in directory: /vol/rzm3/linux-dag/dag/redhat/el6/en/x86_64/dag/RPMS |
