httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Roy T. Fielding" <field...@liege.ICS.UCI.EDU>
Subject Re: Default mime types update for 1.1?
Date Mon, 03 Jun 1996 06:01:46 GMT
> application/x-httpd-cgi        cgi pl

No way -- .pl files on my server are perl scripts that are supposed
to be read as text (i.e., the perl code I've distributed for libwww-perl,
wwwstat, and MOMspider).  Including ".pl" in a cgi script name is a
really bad idea anyway, since it gives additional information to a
cracker for no good reason.

In any case, the only safe default distribution is one that forces
the administrator to activate possibly-unsafe things, rather than have
them lying around by default.


View raw message