httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 21242] - Trailing character renders pages with code
Date Wed, 01 Sep 2004 17:46:02 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=21242>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=21242

Trailing character renders pages with code

wrowe@apache.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID



------- Additional Comments From wrowe@apache.org  2004-09-01 17:46 -------
This bug was addressed in httpd some time ago for filesystem content.
but it does not appear you are using the httpd-2.0 filesystem handler;

  "I am running coldfusion pages "index.cfm" with apache and if a trailing 
   character is appended to the page"

Appears that this is a bug in cold fusion.

Even if we add a new RequireCanonicalPath to enforce the exact path
name (case sensitively, which will break much win32 web content), this
can always occur in a third party module, e.g. cgi arguments and non-httpd
filesystem handlers.

If you like, file an enhancement request to restrict filenames to their
exact name from their directory entries.  Recogize this might not solve
every problem, but i'll be happy to hack it together and let you look
at it.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message