Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (hermes.apache.org: domain of jslive@gmail.com designates
 64.233.184.201 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:references;
        b=JAj+wTMmV8mHPK4RDAcB0cxTJYqh9t88YWzzNYIKRNwOVvxKT2sdM0JANZn3vztR3kyzZRbPWpatd2oIu3BjPFS+dq6KdszLVyzPLM4yUzue42nbOYRPxm7+jsygGhhT09W7Tgb+TFfkDePZHJxmDRx6E+LZRu3H7Nn1aLj5f6I=
Message-ID: <e498c16605040409041cb9392c@mail.gmail.com>
Date: Mon, 4 Apr 2005 12:04:09 -0400
From: Joshua Slive <jslive@gmail.com>
Reply-To: Joshua Slive <jslive@gmail.com>
To: users@httpd.apache.org
In-Reply-To: <20050404154345.GF9684@research.iiit.ac.in>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
References: <20050404154345.GF9684@research.iiit.ac.in>
Subject: Re: [users@httpd] "IncludesNoExec" complains "unable to include
 potential exec"

On Apr 4, 2005 11:43 AM, Deepak, R. <masatran@research.iiit.ac.in> wrote:
> I use ".ssi" as the extension for SSI files and use this option in
> ".htaccess":
>     AddOutputFilter INCLUDES .ssi
> Everything worked until two days ago, when the Linux installation was
> changed from SuSE to Fedora (Fedora Core 3). SSI virtual includes like:
>     <!--#include virtual="/~masatran/includes/header.en-us.xhtml.utf8.ssi"-->
> now print:
>     [an error occurred while processing this directive]
> 
> XML WARNING: These webpages are served as "application/xhtml+xml" to
> browsers which accept it. XML errors are unlike HTML errors; a XML document
> with an error causes only the error to be displayed. So, the source needs to
> be viewed.
> 
> Example webpage: <http://research.iiit.ac.in/~masatran/>. The first line is:
>     <!--#include virtual="/~masatran/includes/header.en-us.xhtml.utf8.ssi"-->
> 

If I remember correctly, apache considers anything with a mime-type
other than text/* to be a potentially "exec" and therefore disallows
it.  There was some talk about changing this, but I can't remember the
outcome.  Your only solution would be to hack mod_include to allow
application/xhtml+xml to be treated as a non-exectuable.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org