httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Marc Slemko <ma...@worldgate.com>
Subject Re: cvs commit: apache-1.3/src/main http_core.c
Date Fri, 03 Jul 1998 23:01:36 GMT
On 3 Jul 1998 coar@hyperreal.org wrote:

> coar        98/07/03 13:06:02
> 
>   Modified:    src      CHANGES
>                src/main http_core.c
>   Log:
>   	Fix <Limit> parsing; "GET" and "get" are distinct methods.

Note that this introduces a security problem in that many users use
something other than the uppercase method name in their config files.
Previously it worked; this will magically stop authentication from being
required for them.  That is bad.


Mime
View raw message