httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Joshua Slive <sl...@finance.commerce.ubc.ca>
Subject Re: Status of 1.3.18 release
Date Mon, 19 Feb 2001 16:48:22 GMT

On Mon, 19 Feb 2001, Martin Kraemer wrote:

> On Sun, Feb 18, 2001 at 02:58:51PM -0500, Jim Jagielski wrote:
> > Martin Kraemer wrote:
> > > Something like
> > >  <Location /*//*>
> > >   Deny from all
> > >
> > >  <Location /*/./*>
> > >   Deny from all
>
> Alas, that does not work. Hmmm. Probably the name is canonicalized somewhere.
>

<Location> collapses multiple slashes into one to avoid some obvious
security issues.  You could try using <LocationMatch> which shouldn't have
this issue, or you could try something like this: (untested)

SetEnvIf Request_URI "//" badrequest
Deny from env=badrequest

Joshua.



Mime
View raw message