Commit e3bf4614 authored by Joe Orton's avatar Joe Orton
Browse files

- don't allow PROPFIND in the default config for public_html directories 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@164763 13f79535-47bb-0310-9956-ffa450edef68
parent 26ea58c4

docs/conf/extra/httpd-userdir.conf.in

+2 −2
Original line number Diff line number Diff line
@@ -16,11 +16,11 @@ UserDir public_html 
<Directory /home/*/public_html>

    AllowOverride FileInfo AuthConfig Limit Indexes

    Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec

    <Limit GET POST OPTIONS PROPFIND>

    <Limit GET POST OPTIONS>

        Order allow,deny

        Allow from all

    </Limit>

    <LimitExcept GET POST OPTIONS PROPFIND>

    <LimitExcept GET POST OPTIONS>

        Order deny,allow

        Deny from all

    </LimitExcept>