httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Niklas Edmundsson <ni...@acc.umu.se>
Subject Re: Proxying subrequests
Date Sun, 28 Oct 2007 08:12:53 GMT
On Sat, 27 Oct 2007, Paul Querna wrote:

> -0.9 on enabling this by default in mod_includes.  Make it possible to
> turn it on via httpd.conf, but never on by default....

I agree.

And it should have huge warning signs, and a long descriptive name 
that does not invite to "let's try this and see if it solves my 
problem".

Cross-site-include-holes are nasty, and I see it as a feature that 
they are not "supported" ;)

/Nikke
-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
  Niklas Edmundsson, Admin @ {acc,hpc2n}.umu.se      |     nikke@acc.umu.se
---------------------------------------------------------------------------
  "The only one who can destroy your Tasha now, is you."  Q
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Mime
View raw message