httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ben Laurie <...@gonzo.ben.algroup.co.uk>
Subject Re: Patch go boom...
Date Mon, 09 Oct 1995 21:30:51 GMT
> 
> 
> Mmm, 
> 
> 	04a_ExtraPath.0.8.14.patch
> 
> For 04a_ExtraPath.0.8.14.patch Ben L writes:
> 
> 	Changelog: Prevent Apache from serving /x/y/z/a as /x/y when z/a
> 		doesn't exist.
> 
> I sort of thought we'd already hammered this out a couple of rounds ago.
> I recall Rob H and I fussing because we both knew of code that used to
> expect a /x/y CGI-BIN script to be passed /z/a as PATH_INFO.  Rob H, you
> wanna confirm?
> 
> Ben, do you want to compare this with:
> 
> 	http://sumwarez.com/cgi-bin/test-cgi/foo/bar
> 
> where PATH_INFO == /foo/bar
> 
> Or am I missing summink.

Yep. This patch does not affect cgi scripts PATH_INFO stuff. The patch
prevents ordinary pages from exhibiting this bizarre behaviour.

> Ay.

-- 
Ben Laurie                  Phone: +44 (181) 994 6435
Freelance Consultant        Fax:   +44 (181) 994 6472
and Technical Director      Email: ben@algroup.co.uk
A.L. Digital Ltd,
London, England.

Mime
View raw message