httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Marc Slemko <ma...@worldgate.com>
Subject RE: Include MultiViews in 'Options All' for 1.3.1?
Date Mon, 06 Jul 1998 00:43:56 GMT
On Sun, 5 Jul 1998, Dan Kearns-LDK001 wrote:

> 
> > At 06:55 PM 7/3/98 +0200, Lars Eilebrecht wrote:
> > >IMHO there is no need to make MultiViews part of the All option.
> > >It won't break any configs, but it will put unnecessary load on
> > >servers from people who are using 'Options All', but do not use
> > >MultiViews.
> 
> Multiviews also opens an ASP-style hole for people who use 
> ScriptAlias instead of some kind of Location or File block 
> and SetHandler to denote script directories, eg 
> 
> ScriptAlias /cgi-bin /web/cgi-bin
> 
> with multiviews lets you call cgi-bin/script.cgi as 
> cgi-bin/script and get the source returned instead of 
> executing the script, which would probably be unexpected.

Erm... I can't replicate this, and if it does allow that then it is a bug.

Oh, you aren't putting the cgi-bin beneath the DocumentRoot are you?


Mime
View raw message