Hi Eric,

I do think you can use that approach in some cases if it solves some problems but there are some issues with it.

Even if you use that approach you will want to make mono the handler for more than just .aspx

For example you should make it handle .config because for security reasons you don't want the Web.config to be served up by some other handler as it has the connection string and other app settings. mono knows not to allow .config files to be served.

In fact the Shared files module of mojoPortal utilizes this feature for security. When a user uploads a file it is saved to disk with a guid string name and .config extension while the friendly name is stored in the db. This prevents the file from being requested using http and obfuscates the name so it can't be guessed easily. mono will serve it up to authorized users using Response.WriteFile(path);

For similar reasons you would also want .ascx .cs .resx (maybe more I'm sleepy) to be handled by mono and probably also .dll since you don't want the compiled stuff to get served. Admittedly .cs files shouldn't be deployed but I've seen people do it.

Also this would break a feature of the Friendly Url mapper in mojoportal, which allows mapping urls like http://www.mojoportal.com/Forums to a specific page because the request would not be handled by mono and would therefore bypass the mapping logic and result in a 404.

So I wouldn't want that to be a blanket rule.

If you use  SetHandler mono I wonder if its possible to make it still use a different handler for other content like .gif .png etc and force some other things not to be handled by mono while letting anything unspecified be handled by mono. That would be ideal.


Joe

Eric,

Dean Brettle recently showed me a way to configure apache to serve some files that are not mono specific

Inside the Virutal Host:
#This causes the xsl file (and other static files) to be served directly by Apache
#instead of Mono. This necessary because Mono sends a Content-Type of
#"application/octet-stream" for the xsl file and that confuses the browser.


SetHandler None


Joe