Skip to content
GitLab
  1. 24 Jun, 1999 5 commits
  3. 23 Jun, 1999 2 commits
  5. 22 Jun, 1999 3 commits
  7. 20 Jun, 1999 4 commits
  9. 19 Jun, 1999 1 commit
  11. 18 Jun, 1999 2 commits
  13. 17 Jun, 1999 1 commit
  15. 14 Jun, 1999 1 commit
  17. 13 Jun, 1999 2 commits
  19. 04 Jun, 1999 2 commits
    • Ken Coar's avatar
      · daeb4a20
      Ken Coar authored 
      	A minor enhancement to SetEnvIf*: allow it to test envariables
	as well as request attributes.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@83292 13f79535-47bb-0310-9956-ffa450edef68
      daeb4a20
    • dgaudet's avatar
      This patch removes the processing of `mxb' parameters in Accept · 6857b46a
      dgaudet authored 
      headers in mod_negotiation.  A second patch updates the manual to
reflect this (mxb is not documented directly in the manual but support
for it is implied in one place).

Reasons for removing this feature:

1) As currently implemented, the 'mxb' feature makes possible certain
denial-of-service attacks on negotiated content.  These attacks are
posssible for user communities which access an Apache server from
behind a HTTP/1.1 proxy which implements `Vary' related optimisations.
Plugging this denial of service hole without removing `mxb' is fairly
expensive in terms of degrading caching efficiency.

2) `mxb' is not in HTTP/1.0 or HTTP/1.1 or any other standard

3) Nobody seems to make use of 'mxb'.  (Balachander Krishnamurthy
kindly offered to grep some of his web traffic traces -- he did not
find a single Accept with mxb in a whole day of recent traffic, nor in
older traces)

4) Removing a feature makes a nice change from adding features.

Submitted by:	Koen Holtman <Koen.Holtman@cern.ch>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@83288 13f79535-47bb-0310-9956-ffa450edef68
      6857b46a
  21. 27 May, 1999 1 commit
  23. 22 May, 1999 1 commit
  25. 19 May, 1999 1 commit
  27. 17 May, 1999 1 commit
  29. 16 May, 1999 1 commit
  31. 13 May, 1999 1 commit
    • Ken Coar's avatar
      · 4ccf8983
      Ken Coar authored 
      	Someone finally stood up and made the ReadmeName and HeaderName
	features use subrequests.  Not only that, but they can be
	parsed for SSIs too!

PR:		1574, 3026, 3529, 3569, 4256
Submitted by:	Raymond S Brand <rsbx@rsbx.net>
Reviewed by:	Ken Coar


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@83202 13f79535-47bb-0310-9956-ffa450edef68
      4ccf8983
  33. 04 May, 1999 1 commit
  35. 03 May, 1999 2 commits
  37. 02 May, 1999 3 commits
  39. 30 Apr, 1999 1 commit
  41. 29 Apr, 1999 3 commits
  43. 27 Apr, 1999 1 commit