Mailing-List: contact bugs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache HTTPD Bugs Notification List" <bugs@httpd.apache.org>
From: bugzilla@apache.org
To: bugs@httpd.apache.org
Subject: [Bug 53483] dangerous PCRE patterns in *Match directives
Date: Fri, 29 Jun 2012 02:13:56 +0000
Message-ID: <bug-53483-7868-QieOA5Y6O3@https.issues.apache.org/bugzilla/>
In-Reply-To: <bug-53483-7868@https.issues.apache.org/bugzilla/>
References: <bug-53483-7868@https.issues.apache.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Auto-Submitted: auto-generated
MIME-Version: 1.0

https://issues.apache.org/bugzilla/show_bug.cgi?id=53483

--- Comment #2 from Christoph Anton Mitterer <calestyo@scientia.net> ---
I just noted that for the same reasons as in comment #1, and again also just
for Directories, but not for locations/aliases etc.

"(?:$|/)"
should be replaceable by:
"/"
(also matching subdirectories

and
"(?:$|/$)"
by:
"(/$)"
(not matching subdirs).


However, even the first one doesn't work with apache2.2
When I give e.g. the pattern
"^/foo/"

i can open the URI
/foo/
/foo/x
but not:
/foo

why??

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org