httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Roy T. Fielding" <field...@gbiv.com>
Subject Re: Removing Limit and LimitExcept (was: svn commit: r1023227 - in /httpd/httpd/trunk: CHANGES server/core.c)
Date Tue, 19 Oct 2010 19:28:32 GMT
IMO, removing Limit and LimitExcept would require a bump to httpd 3.x,
since it would break almost all existing configs and introduce security
holes if the installer is not prepared to rewrite them.

Deprecating Limit and LimitExcept can be done in 2.4.x, which means
keeping their functionality intact and warning at startup that the
feature is less good than the new directives.

....Roy

Mime
View raw message