Mailing-List: contact docs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: docs@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of covener@gmail.com designates
 209.85.128.182 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <53301855.8060607@destatis.de>
References: <53300C52.3070909@destatis.de>
	<CALK=YjPcM2o4LYg0dgP7LC7iVDDsKSr=YE9yut9Bp0UC9NN+xw@mail.gmail.com>
	<53301855.8060607@destatis.de>
Date: Mon, 24 Mar 2014 07:50:44 -0400
Message-ID: 
 <CALK=YjNiRrfG2vAYJ3S_z45XXy6OoR7_aRVV5GJgqwpJGRVo-g@mail.gmail.com>
Subject: Re: Apche 2.4 docs /wr to CVE-2014-0098 log_cookie directive
From: Eric Covener <covener@gmail.com>
To: docs@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1

On Mon, Mar 24, 2014 at 7:34 AM, Hollstein, Mathias
<mathias.hollstein@destatis.de> wrote:
> Hello Eric,
>
> so I can safely assume that when using "%{VARNAME}C" for .e.g. like
> (below) it does the trick/causes serious pain to me?

yes

> # CustomLog with format nickname
> LogFormat "%h %l %u %t \"%r\" %>s %b \"%{mycookie-name}i\"" common
> CustomLog logs/access_log common
s/i/C

>
>
> Can I also assume the documents (current) are perfectly fine since
> "CookieLog Directive" does not have to be specified anymore like
> "CookieLog 'filename'", but the imply is active "automagically" and can
> be used like described above?

I don't think when "CookieLog" did anything it had anything to do with
individual format strings used by the rest of mod_log_config.

> So this essentially mean I have to go through the configs and look for
> such \"%{mycookie-name}i\" statements, right?

"C", not "i"

---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org