MS WebFolder and Zope
Monday, 12 December 2005
The January 2005 update of Web Folders breaks Zope again. This time, WebFolders require a Public header in the response …
Fix: by adding the header in
/lib/python/webdav/Resource.py
RESPONSE.setHeader('Public', ', '.join(self.__http_methods__)) #XXXMSXXX
CLIENT: OPTIONS / HTTP/1.1 SERVER: 200 OK Public: PUT, GET, OPTIONS, PROPFIND ... Allow: PUT, GET, OPTIONS, PROPFIND ...
Funny thing is the Public header is used by exploit kits to sniff out presence of IIS. It is that proprietary.
By the way, MS-Auth-Via header is not required to work with Web Folders. (At least with this version).
Update 09 December 2005: the above patch only works if Anonymous User has access to index_html method. Otherwise, MS WebDAV client will issue
OPTIONS /yourobject
whereby REQUEST.traverse will attempt to access /yourobject/index_html
[This content was migrated from http://teyc.editthispage.com]
