httpd-cvs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From sl...@apache.org
Subject svn commit: r167961 - /httpd/httpd/branches/2.0.x/docs/manual/mod/core.xml
Date Tue, 03 May 2005 19:16:44 GMT
Author: slive
Date: Tue May  3 12:16:43 2005
New Revision: 167961

URL: http://svn.apache.org/viewcvs?rev=167961&view=rev
Log:
Backport:
ErrorDocument updates.

Modified:
    httpd/httpd/branches/2.0.x/docs/manual/mod/core.xml

Modified: httpd/httpd/branches/2.0.x/docs/manual/mod/core.xml
URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.0.x/docs/manual/mod/core.xml?rev=167961&r1=167960&r2=167961&view=diff
==============================================================================
--- httpd/httpd/branches/2.0.x/docs/manual/mod/core.xml (original)
+++ httpd/httpd/branches/2.0.x/docs/manual/mod/core.xml Tue May  3 12:16:43 2005
@@ -898,9 +898,10 @@
     or a message. Apache will sometimes offer additional information
     regarding the problem/error.</p>
 
-    <p>URLs can begin with a slash (/) for local URLs, or be a full
-    URL which the client can resolve. Alternatively, a message can
-    be provided to be displayed by the browser. Examples:</p>
+    <p>URLs can begin with a slash (/) for local web-paths (relative
+    to the <directive module="core">DocumentRoot</directive>), or be a
+    full URL which the client can resolve. Alternatively, a message
+    can be provided to be displayed by the browser. Examples:</p>
 
     <example>
       ErrorDocument 500 http://foo.example.com/cgi-bin/tester<br />
@@ -949,6 +950,14 @@
     Microsoft Knowledge Base article <a
     href="http://support.microsoft.com/default.aspx?scid=kb;en-us;Q294807"
     >Q294807</a>.</p>
+
+    <p>Although most error messages can be overriden, there are certain
+    circumstances where the internal messages are used regardless of the
+    setting of <directive module="core">ErrorDocument</directive>.  In
+    particular, if a malformed request is detected, normal request processing
+    will be immediately halted and the internal error message returned.
+    This is necessary to guard against security problems caused by
+    bad requests.</p>
 
     <p>Prior to version 2.0, messages were indicated by prefixing
     them with a single unmatched double quote character.</p>



Mime
View raw message