httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Nick Kew <>
Subject DirectoryIndex and FollowSymLinks
Date Tue, 21 Nov 2006 03:09:10 GMT
We spent some time fixing a bug on this.  Bugzilla still has

Checking the records, I see in CHANGES for /trunk/

  *) core: Do not allow internal redirects like the DirectoryIndex of
    mod_dir to circumvent the symbolic link checks imposed by
    FollowSymLinks and SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem,
    William Rowe]

But it doesn't appear to be backported, nor is there a proposal

Does anyone recollect where we left this?  Were there still
loose ends that would make a backport problematic?

Nick Kew

Application Development with Apache - the Apache Modules Book

View raw message