httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Brian Behlendorf <br...@organic.com>
Subject Accept: weirdness with directory indexing
Date Mon, 23 Sep 1996 00:59:06 GMT

A request to a directory with an Accept: header containing no text types will
result in a directory listing regardless of whether an index.html or
index.whatever file exists.  I.e.

 telnet www.apache.org 80
 GET / HTTP/1.0
 Accept: image/gif

This could be classified as a security hole, I suppose.  I sorta stumbled on
this by accident which testing some other things.  I am running the most recent
CVS snapshot.

	Brian

--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--
brian@organic.com  www.apache.org  hyperreal.com  http://www.organic.com/JOBS


Mime
View raw message