httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 52439] It should be possible to treat errors in .htaccess as nonfatal
Date Mon, 09 Jan 2012 15:24:10 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=52439

--- Comment #2 from Nick Kew <nick@webthing.com> 2012-01-09 15:24:10 UTC ---
That's for the server admin to determine.  The current situation can also lead
to security issues where AllowOverride.

Posting an explanation from someone who runs hosting and is concerned about
Options:

- We currently disallow FollowSymLinks due to security reasons
- We do allow SymLinksIfOwnerMatch which is enough for most CMS and other
systems used on our platform to work
- Many systems ship with .htaccess files containing "Options +FollowSymLinks"
or "Options None" causing errors

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message