httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "William A. Rowe Jr." <>
Subject Re: Removing Limit and LimitExcept
Date Tue, 19 Oct 2010 20:36:16 GMT
On 10/19/2010 3:32 PM, Stefan Fritsch wrote:
> On Tuesday 19 October 2010, Roy T. Fielding wrote:
>> Then fix the insane behavior.
> I don't think that's an option. Changing the behaviour of Limit will 
> surely break some users' auth configs in subtle ways, which is much 
> worse than a clean break.

Well, there is a fix.  Disallow all cmd's that don't flag themselves as
being 'limit aware'.  It will break lots of configs in very obvious ways,
but that those configs worked in the first place would be a mystery to
the administrator :)

View raw message