httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Brian Behlendorf <br...@organic.com>
Subject Re: double slashes (was Re: WWW Form Bug Report: "Security bug involving ScriptAliased directories" on Linux)
Date Fri, 03 Nov 1995 22:19:56 GMT
On Fri, 3 Nov 1995, Robert S. Thau wrote:
> After looking yours over, I *think* I could live with it (probably in
> preference to mine) --- I was worried in particular about // in PATH_INFO,
> but you seem to have done that right.  However, I'm still wondering (with
> Brian, apparently) whether there really is a problem here at all... there
> isn't in, at least, the default, out-of-the-box configuration.

I don't think any code changes are warranted at this time.  Let's not 
beat ourselves up over this issue.

	Brian

--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--
brian@organic.com  brian@hyperreal.com  http://www.[hyperreal,organic].com/


Mime
View raw message