httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From r..@ai.mit.edu (Robert S. Thau)
Subject Re: E71 Description File Addition
Date Tue, 11 Apr 1995 13:50:31 GMT
WRT downloading .htaccess files, one approach might be to have a
TotallyIgnore directive, along the lines of IndexIgnore, which would
direct the server to behave as if files which matched the relevant
regexp's were not even present, if a client asked to retrieve one.
(This would handle one case which bugs me --- right now, attackers
can probably get source code for *.cgi scripts from a lot of sites
by fishing around for emacs backups).

rst

Mime
View raw message