Graphviz Issue Tracker
Mantis Bug Tracker

View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0002204graphvizDotpublic2012-02-27 06:222012-02-28 18:17
ReporterCompumatica 
Assigned Toellson 
PriorityurgentSeveritymajorReproducibilityalways
StatusclosedResolutionno change required 
PlatformLinuxOSopenSUSEOS Version11.1
Summary0002204: URL in image path...
DescriptionHello,
in a former report issue ( http://www.graphviz.org/mantisbt/view.php?id=2181 [^] ) I've asked, if it is possible to place a file path as an URL?... I'm highly interested to generate such graphs via internet, if possible:

digraph G
{
  a[ shape=box image="http://url/png/a.png" [^] ];
  b[ shape=box shapefile="http://url/png/b.png" [^] ];
  a->b;
}

alternatively

digraph G
{
  imagepath="http://url/png/"; [^]
  a[ shape=box image="a.png" ];
  b[ shape=box shapefile="b.png" ];
  a->b;
}

Then I've got an answer, that you used to support this, but it became apparent that this created security holes, so you removed the code.

I'd like to compile my own version of sour sources including this feature, but I cannot find the code passages, where I can add it back. - Can you help me?

Chris, Germany
TagsNo tags attached.
AUXILLARY-FILES
DATE-FIXED
FIX-COMMENT
FORMER-ID
INPUT-FILE
OUTPUT-FILE
STATUS-COMMENT
VERSION
Attached Files

- Relationships

-  Notes
User avatar (0000194)
ellson (administrator)
2012-02-27 10:03

You would need to extend safefile() at lib/common/utils.c:419

You should be careful not to permit unrestricted "file:" URLs if HTTPServerEnVar is set.

For efficiency you should download the file to some cache (using HTTP's "get-if-modified-since" if the file from that URL already exists). On linux boxes you should probably use /var/cache/graphviz/

You need to deal with, 404 errors, and 404 errors with a local cached copy that might be stale. I think you should indicate the errors by means of a small image with text in it showing the error in the graph.
User avatar (0000195)
Compumatica (reporter)
2012-02-27 10:15

Thanks!!!
Chris...

- Issue History
Date Modified Username Field Change
2012-02-27 06:22 Compumatica New Issue
2012-02-27 10:03 ellson Note Added: 0000194
2012-02-27 10:15 Compumatica Note Added: 0000195
2012-02-28 18:17 erg Assigned To => ellson
2012-02-28 18:17 erg Status new => closed
2012-02-28 18:17 erg Resolution open => no change required


MantisBT 1.2.5[^]
Copyright © 2000 - 2011 MantisBT Group
Powered by Mantis Bugtracker