Skip to content
GitLab
  1. 18 Jun, 1999 2 commits
  3. 17 Jun, 1999 1 commit
  5. 14 Jun, 1999 1 commit
  7. 13 Jun, 1999 2 commits
  9. 04 Jun, 1999 2 commits
    • Ken Coar's avatar
      · daeb4a20
      Ken Coar authored 
      	A minor enhancement to SetEnvIf*: allow it to test envariables
	as well as request attributes.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@83292 13f79535-47bb-0310-9956-ffa450edef68
      daeb4a20
    • dgaudet's avatar
      This patch removes the processing of `mxb' parameters in Accept · 6857b46a
      dgaudet authored 
      headers in mod_negotiation.  A second patch updates the manual to
reflect this (mxb is not documented directly in the manual but support
for it is implied in one place).

Reasons for removing this feature:

1) As currently implemented, the 'mxb' feature makes possible certain
denial-of-service attacks on negotiated content.  These attacks are
posssible for user communities which access an Apache server from
behind a HTTP/1.1 proxy which implements `Vary' related optimisations.
Plugging this denial of service hole without removing `mxb' is fairly
expensive in terms of degrading caching efficiency.

2) `mxb' is not in HTTP/1.0 or HTTP/1.1 or any other standard

3) Nobody seems to make use of 'mxb'.  (Balachander Krishnamurthy
kindly offered to grep some of his web traffic traces -- he did not
find a single Accept with mxb in a whole day of recent traffic, nor in
older traces)

4) Removing a feature makes a nice change from adding features.

Submitted by:	Koen Holtman <Koen.Holtman@cern.ch>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@83288 13f79535-47bb-0310-9956-ffa450edef68
      6857b46a
  11. 27 May, 1999 1 commit
  13. 22 May, 1999 1 commit
  15. 19 May, 1999 1 commit
  17. 17 May, 1999 1 commit
  19. 16 May, 1999 1 commit
  21. 13 May, 1999 1 commit
    • Ken Coar's avatar
      · 4ccf8983
      Ken Coar authored 
      	Someone finally stood up and made the ReadmeName and HeaderName
	features use subrequests.  Not only that, but they can be
	parsed for SSIs too!

PR:		1574, 3026, 3529, 3569, 4256
Submitted by:	Raymond S Brand <rsbx@rsbx.net>
Reviewed by:	Ken Coar


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@83202 13f79535-47bb-0310-9956-ffa450edef68
      4ccf8983
  23. 04 May, 1999 1 commit
  25. 03 May, 1999 2 commits
  27. 02 May, 1999 3 commits
  29. 30 Apr, 1999 1 commit
  31. 29 Apr, 1999 3 commits
  33. 27 Apr, 1999 2 commits
  35. 26 Apr, 1999 1 commit
  37. 22 Apr, 1999 1 commit
  39. 21 Apr, 1999 1 commit
  41. 20 Apr, 1999 3 commits
  43. 14 Apr, 1999 1 commit
  45. 08 Apr, 1999 1 commit
  47. 23 Mar, 1999 1 commit
  49. 22 Mar, 1999 2 commits
  51. 21 Mar, 1999 1 commit
  53. 20 Mar, 1999 1 commit
    • Ken Coar's avatar
      · 67c157b6
      Ken Coar authored 
      	Add PassAllEnv to make all of the server's environment variables
	available to CGIs and SSIs within the directive's scope.  NOT
	recommended for general use, but eases the transition for IBM's
	current LDGW customers to Apache.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@82956 13f79535-47bb-0310-9956-ffa450edef68
      67c157b6
  55. 19 Mar, 1999 1 commit