On 2 Jan 2001, Andreas J. Koenig wrote:

> As I see no risk of a namespace clash all three suggestions sound OK
> to me. MailURL would be the most generic but it should really not be
> limited to static pages on the local filesystem. Maybe you will add
> this functionality (it should be a matter of a few lines)?

A few lines and a potential security hazard!  I can easily see how the
module could be used in DOS attacks and as an attack redirector if it was
willing to fetch and mail arbitrary pages on the web.  Yes, there would be
ways to mitigate the danger, but it doesn't seem warrented to me.  If many
people request that functionality - perhaps limited to the local server
name or something - I would consider it.  My inclination is to keep first
releases simple and targeted and to allow the users of the module to guide
the creaping featurism.

Thanks!

-sam






Reply via email to