ksgi

1
digraph {
2
	node [shape="ellipse"; width="0"; height="0"; margin="0.05,0.05"];
3
	edge [arrowsize="0.5";];
4

5
	subgraph cluster0 {
6
		color="black";
7
		client [label="application logic"];
8
		subgraph cluster1 {
9
			parser [shape="record"; label="{ HTTP parser | input validator }"];
10
			color="red";
11
			label="sandboxed child";
12
			labelloc="b";
13
		}
14
		subgraph cluster2 {
15
			delegator [shape="record"; label="{ connection delegator }"];
16
			color="red";
17
			label="sandboxed child";
18
			labelloc="b";
19
		}
20
		label="FastCGI client";
21
	}
22
	evil [label="FastCGI socket"];
23

24
	delegator -> client [label="channel"];
25
	delegator -> parser [label="FastCGI Session"];
26
	parser -> client [label="validated pairs"];
27
	evil -> delegator [label="FastCGI"];
28
	client -> evil [label="HTTP"];
29
}
30