httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Lars Eilebrecht <l...@eilebrecht.net>
Subject Re: Removing Limit and LimitExcept (was: svn commit: r1023227 - in /httpd/httpd/trunk: CHANGES server/core.c)
Date Thu, 21 Oct 2010 15:48:01 GMT
Jim Jagielski wrote:

> ++1.
> 
> On Oct 19, 2010, at 3:28 PM, Roy T. Fielding wrote:
> 
> > IMO, removing Limit and LimitExcept would require a bump to httpd 3.x,
> > since it would break almost all existing configs and introduce security
> > holes if the installer is not prepared to rewrite them.
> > 
> > Deprecating Limit and LimitExcept can be done in 2.4.x, which means
> > keeping their functionality intact and warning at startup that the
> > feature is less good than the new directives.
> > 
> > ....Roy

Big +1 


cheers
-- 
Lars Eilebrecht
lars@eilebrecht.net

Mime
View raw message