[Mailman-Developers] Mailman's CGI doesn't seem to handle the PROPFIND HTTP Request Method

[Tollef Fog Heen]

* Daniel Buchmann 

| Forwarding a bug from the Debian bug tracking system:
| http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=202821
| 
| Anyone else seen this? What wrong here/who's fault is this?

It seems to me like the driver wrapper should filter out everything
which is not in ['GET', 'POST', 'HEAD'].

Something like

--- mailman-2.1.2.orig/scripts/driver
+++ mailman-2.1.2/scripts/driver
@@ -56,6 +56,7 @@
     # These will ensure that even if something between now and the
     # creation of the real logger below fails, we can still get
     # *something* meaningful.
+
     logger = None
     try:
         import paths
@@ -81,6 +82,15 @@
         module = getattr(pkg, scriptname)
         main = getattr(module, 'main')
         try:
+            import os
+            request_method = os.environ.get('REQUEST_METHOD')
+            if not request_method in ['GET', 'POST', 'HEAD']:
+                print "Status: 405 Method not allowed"
+                print "Content-type: text/plain"
+                print
+                print "The method is not allowed"
+                sys.exit()
+                
             try:
                 sys.stderr = logger
                 sys.stdout = tempstdout

works for me.

-- 
Tollef Fog Heen                                                        ,''`.
UNIX is user friendly, it's just picky about who its friends are      : :' :
                                                                      `. `' 
                                                                        `-