Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of covener@gmail.com designates
 66.249.92.174 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:in-reply-to:mime-version
         :content-type:content-transfer-encoding:content-disposition
         :references;
        b=O/YM1Hkj0/bMcpxOuPrnGz/nGn4JJqHTr6/aOS1Vbf855AQF0Vev0jzCd7gdKx9CRp
         c8CCRaLNdhPavyUz6AdjCLFAeA/jE+E+KYQA0zqiCQ86ZYVQY1GVT8PBdpHLO8LwN+ro
         ycsXRPPzefvpTMWWDzuAkyFTHNcl+ybldNy4w=
Message-ID: <1404e5910809250548p35cde3cdhc49715ff16d35fe7@mail.gmail.com>
Date: Thu, 25 Sep 2008 08:48:47 -0400
From: "Eric Covener" <covener@gmail.com>
To: users@httpd.apache.org
In-Reply-To: <48DB82C8.5030501@ice-sa.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <b8a714240809230436j366ef6d8y2af0fd301d73dfe4@mail.gmail.com>
	 <b8a714240809240159t58064acct800fac8fb63098c@mail.gmail.com>
	 <48DA9821.8060701@ice-sa.com> <48DAAEC1.3090708@rowe-clan.net>
	 <b8a714240809241508w1de447feqc40f37a3e4c8ea07@mail.gmail.com>
	 <48DB3260.1040707@ice-sa.com> <48DB4F59.4000103@ice-sa.com>
	 <b8a714240809250200x5ec98eedl8eadec1f36f28dcb@mail.gmail.com>
	 <1404e5910809250444j1ccb270by74e4b20e00fdf294@mail.gmail.com>
	 <48DB82C8.5030501@ice-sa.com>
Subject: Re: [users@httpd] Differences between different Apaches in file
 requests

On Thu, Sep 25, 2008 at 8:23 AM, Andr=E9 Warnier <aw@ice-sa.com> wrote:

> In that respect, yes you should.  The client should not have to know on
> which platform the server is running, and send a fundamentally different =
URL
> depending.

You don't have to know the platform. You have to know the filename
byte-by-byte (typically by following a proper link).

> I did the following experiment : on a Linux Debian Apache 2.2.4 server, I=
 copied the file "joaqu=EDn.gif" in the document root.

I don't have too much experience here, but was the filename morphed
into some other codeset during the copy (mount option, editor, etc)?

> In any case, that the Windows incarnation of Apache 2.x would return a 40=
3 code (instead of the less inappropriate 404) is still another issue.
> The URL requested is not illegal, nor is this document submitted to any k=
ind of permission or authorization.

IMO The 403 is returned in a path where errors imply a high likelyhood
of someone actively trying to fool the server -- I don't think a 403
is too inappropriate here.

I don't know if any other status code would be appealing enough to
motivate trapping this error early (i.e. don't bother trying to map to
a file if there's invalid utf-8 somewhere in the URL on windows).


--=20
Eric Covener
covener@gmail.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org