Commit 1a85b9ef authored by Nick Kew's avatar Nick Kew
Browse files

PR#40950: add security note to docs (submitted Thijs Kinkhorst)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@487904 13f79535-47bb-0310-9956-ffa450edef68
parent 5a4e9436
Loading
Loading
Loading
Loading
+5 −0
Changes for docs/manual/programs/htdigest.xml: 5 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -66,4 +66,9 @@
    </dl>
</section>

<section id="security"><title>Security Considerations</title>
    <p>This program is not safe as a setuid executable. Do <em>not</em> make it
    setuid.</p>
</section>

</manualpage>
+3 −0
Changes for docs/manual/programs/htpasswd.xml: 3 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -188,6 +188,9 @@ distribution.</seealso>
    <em>not</em> be within the Web server's URI space -- that is, they should
    not be fetchable with a browser.</p>

    <p>This program is not safe as a setuid executable. Do <em>not</em> make it
    setuid.</p>

    <p>The use of the <code>-b</code> option is discouraged, since when it is
    used the unencrypted password appears on the command line.</p>