Skip to content
  1. Jun 04, 1999
    • dgaudet's avatar
      This patch removes the processing of `mxb' parameters in Accept · 6857b46a
      dgaudet authored 
      headers in mod_negotiation.  A second patch updates the manual to
reflect this (mxb is not documented directly in the manual but support
for it is implied in one place).

Reasons for removing this feature:

1) As currently implemented, the 'mxb' feature makes possible certain
denial-of-service attacks on negotiated content.  These attacks are
posssible for user communities which access an Apache server from
behind a HTTP/1.1 proxy which implements `Vary' related optimisations.
Plugging this denial of service hole without removing `mxb' is fairly
expensive in terms of degrading caching efficiency.

2) `mxb' is not in HTTP/1.0 or HTTP/1.1 or any other standard

3) Nobody seems to make use of 'mxb'.  (Balachander Krishnamurthy
kindly offered to grep some of his web traffic traces -- he did not
find a single Accept with mxb in a whole day of recent traffic, nor in
older traces)

4) Removing a feature makes a nice change from adding features.

Submitted by:	Koen Holtman <Koen.Holtman@cern.ch>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@83288 13f79535-47bb-0310-9956-ffa450edef68
      6857b46a
  3. May 27, 1999
  5. May 22, 1999
  7. May 19, 1999
  9. May 17, 1999
  11. May 16, 1999
  13. May 13, 1999
    • Ken Coar's avatar
      · 4ccf8983
      Ken Coar authored 
      	Someone finally stood up and made the ReadmeName and HeaderName
	features use subrequests.  Not only that, but they can be
	parsed for SSIs too!

PR:		1574, 3026, 3529, 3569, 4256
Submitted by:	Raymond S Brand <rsbx@rsbx.net>
Reviewed by:	Ken Coar


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@83202 13f79535-47bb-0310-9956-ffa450edef68
      4ccf8983
  15. May 04, 1999
  17. May 03, 1999
  19. May 02, 1999
  21. Apr 30, 1999
  23. Apr 29, 1999
  25. Apr 27, 1999
  27. Apr 26, 1999
  29. Apr 22, 1999
  31. Apr 21, 1999
  33. Apr 20, 1999
  35. Apr 14, 1999
  37. Apr 08, 1999
  39. Mar 23, 1999
  41. Mar 22, 1999
  43. Mar 21, 1999
  45. Mar 20, 1999
    • Ken Coar's avatar
      · 67c157b6
      Ken Coar authored 
      	Add PassAllEnv to make all of the server's environment variables
	available to CGIs and SSIs within the directive's scope.  NOT
	recommended for general use, but eases the transition for IBM's
	current LDGW customers to Apache.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@82956 13f79535-47bb-0310-9956-ffa450edef68
      67c157b6
  47. Mar 19, 1999
  49. Mar 16, 1999
  51. Mar 15, 1999
  53. Mar 07, 1999
  55. Mar 04, 1999