X-Git-Url: https://codewiz.org/gitweb?p=geekigeeki_data.git;a=blobdiff_plain;f=sys%2Fmacros%2FCgiVar.py;fp=sys%2Fmacros%2FCgiVar.py;h=807662c423cf0ea977f662cb4246595ddeb07f24;hp=c2ba707f1eca16a60ee7ab728a7660ff528e24f4;hb=5ccd80c4d6de5f88f29c83faf0a568534c2f53a8;hpb=c55d03237f67a1ef548857cb688a769c76db73db diff --git a/sys/macros/CgiVar.py b/sys/macros/CgiVar.py index c2ba707..807662c 100644 --- a/sys/macros/CgiVar.py +++ b/sys/macros/CgiVar.py @@ -1,9 +1,14 @@ #acl bernie:read,write All:read +#FIXME: couldn't we just return any env variable? +# Would there be any security issues? def _macro_CgiVar(*args, **kvargs): + if args[1].startswith('HTTP_'): + return os.environ.get(args[1], '') return { + 'SCRIPT_NAME': script_name(), 'REMOTE_USER': remote_user(), 'REMOTE_HOST': get_hostname(remote_host()), 'REMOTE_ADDR': remote_host(), - 'QUERY_STRING': relative_url(query_string()), + 'QUERY_STRING': query_string(), }[args[1]]