[users@httpd] AllowEncodedSlashes directive

[Werner Schalk <we...@gmx.de>]

Hi,

what is the use of the AllowEncodedSlashes directives?
I mean I did not get the point yet what is it used for and
why was it intoduced?

Bye and thanks,
Werner.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] AllowEncodedSlashes directive

[Joshua Slive <jo...@slive.ca>]

On Thu, 4 Dec 2003, Werner Schalk wrote:

> Hi,
>
> what is the use of the AllowEncodedSlashes directives?
> I mean I did not get the point yet what is it used for and
> why was it intoduced?

By default, apache will reject any request that has %2f in it to protect
programs that may decode it and do something dangerous with it.  If you
want to be able to use %2f in URLs, you need to change that behavior.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org