httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 49859] New: url with additional filepath generates bad environment variables.
Date Wed, 01 Sep 2010 15:12:43 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=49859

           Summary: url with additional filepath generates bad environment
                    variables.
           Product: Apache httpd-2
           Version: 2.2.3
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_mime
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: ben@redsnapper.net


Using the following:

AddHandler   test-file                .tst
Action       test-file                    /cgi-bin/set.cgi

And with set.cgi = 

#!/bin/bash
echo
echo
echo "$@"
set

with an existing file "test.tst" and the url:  "http://host/test.tst"
everything is fine = we see eg PATH_TRANSLATED showing "...test.tst"

BUG is exposed with same environment, but the url
"http://host/test.tst/ghost.html"

The handler sees test.tst and calls set.cgi - however,  PATH_TRANSLATED
includes /ghost.html as a part of the path, even though clearly the logic is
wrong. 

The url should not trigger the handler - (because the file
..../test.tst/ghost.html does not exist )
but should instead trigger a 404.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message