You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Marc Slemko <ma...@znep.com> on 1999/10/08 05:05:57 UTC

Re: cvs commit: apache-1.3/conf httpd.conf-dist httpd.conf-dist-win

On 27 Aug 1999 dirkx@hyperreal.org wrote:

> dirkx       99/08/27 08:04:20
> 
>   Modified:    conf     httpd.conf-dist httpd.conf-dist-win
>   Log:
>   Just making sure that all the language's we currently have the welcome
>   page as, are all available.
>   
>   Revision  Changes    Path
>   1.43      +21 -10    apache-1.3/conf/httpd.conf-dist
>   
>   Index: httpd.conf-dist
>   ===================================================================
>   RCS file: /x3/home/cvs/apache-1.3/conf/httpd.conf-dist,v
>   retrieving revision 1.42
>   retrieving revision 1.43
>   diff -u -r1.42 -r1.43
>   --- httpd.conf-dist	1999/05/05 20:17:59	1.42
>   +++ httpd.conf-dist	1999/08/27 15:04:15	1.43
>   @@ -308,7 +308,7 @@
>    # Note that "MultiViews" must be named *explicitly* --- "Options All"
>    # doesn't give it to you.
>    #
>   -    Options Indexes FollowSymLinks
>   +    Options Indexes FollowSymLinks MultiViews

Is there any reason to be concerned about enabling multiviews in the
default config file?  It is a... perhaps significant change in behaviour.


Re: cvs commit: apache-1.3/conf httpd.conf-dist httpd.conf-dist-win

Posted by Brian Behlendorf <br...@collab.net>.
On Thu, 7 Oct 1999, Marc Slemko wrote:
> On 27 Aug 1999 dirkx@hyperreal.org wrote:
> 
> >   -    Options Indexes FollowSymLinks
> >   +    Options Indexes FollowSymLinks MultiViews
> 
> Is there any reason to be concerned about enabling multiviews in the
> default config file?  It is a... perhaps significant change in behaviour.

It adds overhead, so Apache will be slower in performance tests where the
default configs are used.  That would be my main criticism.  I don't see
it as a security problem, though it does deviate somewhat from the rule of
least-surprises.

	Brian




Re: cvs commit: apache-1.3/conf httpd.conf-dist httpd.conf-dist-win

Posted by Marc Slemko <ma...@znep.com>.
On Thu, 7 Oct 1999, Marc Slemko wrote:

> On 27 Aug 1999 dirkx@hyperreal.org wrote:
> 
> > dirkx       99/08/27 08:04:20
> > 
> >   Modified:    conf     httpd.conf-dist httpd.conf-dist-win
> >   Log:
> >   Just making sure that all the language's we currently have the welcome
> >   page as, are all available.
> >   
> >   Revision  Changes    Path
> >   1.43      +21 -10    apache-1.3/conf/httpd.conf-dist
> >   
> >   Index: httpd.conf-dist
> >   ===================================================================
> >   RCS file: /x3/home/cvs/apache-1.3/conf/httpd.conf-dist,v
> >   retrieving revision 1.42
> >   retrieving revision 1.43
> >   diff -u -r1.42 -r1.43
> >   --- httpd.conf-dist	1999/05/05 20:17:59	1.42
> >   +++ httpd.conf-dist	1999/08/27 15:04:15	1.43
> >   @@ -308,7 +308,7 @@
> >    # Note that "MultiViews" must be named *explicitly* --- "Options All"
> >    # doesn't give it to you.
> >    #
> >   -    Options Indexes FollowSymLinks
> >   +    Options Indexes FollowSymLinks MultiViews
> 
> Is there any reason to be concerned about enabling multiviews in the
> default config file?  It is a... perhaps significant change in behaviour.

Also, providing welcome pages for various languages makes it very likely
that a new user will want to put up their own page, so they edit
"index.html.en", see it change for them, and think they are done. Then
random other people come along with different language settings and still
see the default page.  The Apache user won't necessarily know they also
have to remove index.html.* or to create their page as index.html...