|
|
|
|
|
by tedchs
5173 days ago
|
|
First, a warning -- I read through the Ruby source code for this project and it does zero input validation and is subject to many glaring security vulnerabilities, including directory traversal attacks. If you run this code, be prepared to serve up your entire disk to the Internet -- read/write at that! If you want a REST/JSON based HTTP file storage server, just run Riak. Or if you want HTTP but don't care about JSON, fire up a WebDAV server of your choice. Incidentally, both of those technologies are about as compatible with the S3 protocol as this so-called "OpenS3" project... which is to say, they're not at all. If a 200-line Rack hack is what it takes to make HN then I need to start submitting more of the code I write... |
|