Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: local policy)
Message-ID: <48DB82C8.5030501@ice-sa.com>
Date: Thu, 25 Sep 2008 14:23:36 +0200
From: =?ISO-8859-1?Q?Andr=E9_Warnier?= <aw@ice-sa.com>
User-Agent: Thunderbird 2.0.0.16 (Windows/20080708)
MIME-Version: 1.0
To: users@httpd.apache.org
References: <b8a714240809230436j366ef6d8y2af0fd301d73dfe4@mail.gmail.com>
	 <48D8FAAD.6000001@ice-sa.com>
	 <b8a714240809240152s7c6d90d3l582ca850696cca7a@mail.gmail.com>
	 <b8a714240809240159t58064acct800fac8fb63098c@mail.gmail.com>
	 <48DA9821.8060701@ice-sa.com>
 <48DAAEC1.3090708@rowe-clan.net>	 <b8a714240809241508w1de447feqc40f37a3e4c8ea07@mail.gmail.com>
	 <48DB3260.1040707@ice-sa.com>
 <48DB4F59.4000103@ice-sa.com>	 <b8a714240809250200x5ec98eedl8eadec1f36f28dcb@mail.gmail.com>
 <1404e5910809250444j1ccb270by74e4b20e00fdf294@mail.gmail.com>
In-Reply-To: <1404e5910809250444j1ccb270by74e4b20e00fdf294@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
Subject: Re: [users@httpd] Differences between different Apaches in file
 requests

Eric Covener wrote:
> On Thu, Sep 25, 2008 at 5:00 AM, #V[�]lent�n <valentin@sanva.net> wrote:
> 
>>> In any case, thanks for bringing this problem up.  I have been using
>>> Apache for a very long time, and I am also not an native English-speaker.  I
>>> can't imagine that I have not encountered the same issue before, so I can
>>> only imagine that this logic is relatively new in Apache under Windows.
>>>
> 
> Seems to be the same behavior in 2.0, I hadn't seen anyone post the
> error log entry generated for these:
> 
> (22)Invalid argument: Cannot map GET /%DE HTTP/1.1 to file
> 
> IMO this should be a decent hint to keep someone from looking at
> permissions or authorization.  Net, you have to carefully link to your
> non US-ASCII content on all platforms, you can't just type something
> semantically equivalent in your client.
> 
In that respect, yes you should.  The client should not have to know on 
which platform the server is running, and send a fundamentally different 
URL depending.

I did the following experiment : on a Linux Debian Apache 2.2.4 server, 
I copied the file "joaqu�n.gif" in the document root.
Then, with the same workstation and the same Firefox browser as before, 
I requested "http://hostname/joaqu�n.gif".
I get the document without problem.
The Apache access log has this to say :
192.168.245.253 - - [25/Sep/2008:14:12:43 +0200] "GET /joaqu%EDn.gif 
HTTP/1.1" 200 2326 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; 
rv:1.8.1.15) Gecko/20080623 Firefox/2.0.0.15"

In any case, that the Windows incarnation of Apache 2.x would return a 
403 code (instead of the less inappropriate 404) is still another issue.
The URL requested is not illegal, nor is this document submitted to any 
kind of permission or authorization.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org