Return-Path: Delivered-To: apmail-httpd-test-dev-archive@httpd.apache.org Received: (qmail 80881 invoked by uid 500); 9 Nov 2001 20:10:19 -0000 Mailing-List: contact test-dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: test-dev@httpd.apache.org list-help: list-unsubscribe: list-post: Delivered-To: mailing list test-dev@httpd.apache.org Received: (qmail 80870 invoked from network); 9 Nov 2001 20:10:19 -0000 Message-ID: <3BEC3983.D690E502@Golux.Com> Date: Fri, 09 Nov 2001 15:16:03 -0500 From: Rodent of Unusual Size Organization: The Apache Software Foundation X-Mailer: Mozilla 4.76 [en] (WinNT; U) X-Accept-Language: en MIME-Version: 1.0 To: test-dev@httpd.apache.org Subject: Re: [franklin_tech_bulletins@yahoo.com: IBM AS/400 HTTP Server '/' attack] References: <20011108145149.E137@doom.sfo.covalent.net> <3BEBB9A8.EF78EADF@Golux.Com> <009701c16936$e6093c80$93c0b0d0@v505> <3BEC37BC.4B4F78E3@Golux.Com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N Rodent of Unusual Size wrote: > > "William A. Rowe, Jr." wrote: > > > > Since the default handler doesn't glom onto trailing path_info, > > it doesn't get handled. All 1.3 pages I tested _without_ SSI's > > enabled returned 404. > > Irrelevant. It is perfectly possible and acceptable to submit > path-info to a resource that cannot handle it (e.g., a text/plain > file). If we return 404 for that, we are broken -- period. Nrrgh, I take that back, at least temporarily. Objections currently in abeyance while I check some stuff.. :-/ -- #ken P-)} Ken Coar, Sanagendamgagwedweinini http://Golux.Com/coar/ Author, developer, opinionist http://Apache-Server.Com/ "All right everyone! Step away from the glowing hamburger!"