Oracle A54857-03 - Manual (Page 56)

6-8 Oracle Web Application Server™ Installation Guide
Server Side Includes (parse-html)
On Netscape, the parse-html option means it will parse the HTML files with any
SSI before sending them to the client. The parse-html option is associated with
the optional opts=no-exec (which prevents the client from executing anything
on the server machine), and can be applied to any files and directories on the
server machines, whether the files and directories appear on its directory
mapping or not. For example:
#
# dirmap
#
...
NameTrans from=”/ows/3.0” fn=”pfx2dir” dir=”/d1/ows/3.0”
...
#
# file with parse-html enabled
#
...
<Object ppath=”/d1/ows/3.0/docs/sstest.html”>
Service fn=”parse-html” method=”(GET|HEAD)” type=”magnus-
internal/parsed-html”
</Object>
<Object ppath=”/d1/noway/sstest.html”>
Service fn=”parse-html” opts=no-exec method=”(GET|HEAD)”
type=”magnus-internal/parsed-html”
</Object>
Both /d1/noway/sstest.html and /d1/ows/3.0/docs/sstest.html are parsed before
being sent to the client, although /d1/noway/sstest.html does not appear on the
directory mapping. In addition, accessing /d1/noway/sstest.html does not allow
any exec on the server machine, but accessing /d1/ows21/docs/sstest.html does
allow exec on the server machine.
Oracle Web Application Server only allows the SSI processing of the files under
the directory specified in wrb.app [AppDirs] section with use of SSI. For
example, in wrb.app:
[AppDirs]
/ssi SSI /oracle/ows/3.0/sample/ssi
All files under /oracle/ows/3.0/sample/ssi are processed with the SSI cartridge
before being sent to the client. In addition, the global SSI flag ParseHTMLExtn
must stay TRUE to parse the file with any extension, or you can set the
ExtensionList = html shtml
to include the extension of files that must be parsed.
Similarly, the global SSI flag EnableExecTag is global to the whole server and
cannot be associated with any particular files. Therefore, the user can move all