On Mon, 8 Feb 2016 11:16:03 -0500, Sam Tobin-Hochstadt <sa...@cs.indiana.edu> wrote:
>The vulnerability affects web servers that serve static files using >the `#:extra-static-files` option, including the default value of this >option. Um ... where is that keyword used? Or documented? I'm using 6.1.1 (yes, I know I'm behind) and I searched the full source but I can't find "extra-static-files" anywhere. In 6.1.1 serve/servlet appears to use #:extra-files-paths for the stated purpose. ??? >If you cannot immediately upgrade to version 6.4, we have provided a >package catalog with updated versions of the "web-server-lib" package >for versions of Racket back to 6.0. That catalog is located at > > http://download.racket-lang.org/patches/web-server-1/ I get a 404 error. George -- You received this message because you are subscribed to the Google Groups "Racket Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to racket-users+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.