You are viewing a plain text version of this content. The canonical link for it is here.
Posted to apache-bugdb@apache.org by Jerrad Pierce <be...@mit.edu> on 2001/11/27 15:48:08 UTC
mod_alias/8873: ScriptAlias forcs unexpected behavior
>Number: 8873
>Category: mod_alias
>Synopsis: ScriptAlias forcs unexpected behavior
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: apache
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: apache
>Arrival-Date: Tue Nov 27 06:50:00 PST 2001
>Closed-Date:
>Last-Modified:
>Originator: belg4mit@mit.edu
>Release: 1.3.22
>Organization:
apache
>Environment:
Linux dirty-bastard.pthbb.org 2.2.20 #1 Mon Nov 19 23:09:19 EDT 2001 i586 unknown
>Description:
With the following setup index.cgi is not
presented but a 403 with
attempt to invoke direct ory as script: /var/www/cgi-bin
in the error_log.
DirectoryIndex index.html index.cgi
ScriptAlias /cgi-bin/ /home/net/httpd/cgi-bin/
<Directory /home/net/httpd/cgi-bin>
AllowOverride None
Options ExecCGI
</Directory>
However with this (s/Script//m) the desired
behavior is acheived. It is not-obvious that
this seemingly inconsequential change is
critical for this. The documentation infers
that ScriptAlias = Alias + an otherwise empty
Directory directive with Options ExecCGI.
DirectoryIndex index.html index.cgi
Alias /cgi-bin/ /home/net/httpd/cgi-bin/
<Directory /home/net/httpd/cgi-bin>
AllowOverride None
Options ExecCGI
</Directory>
>How-To-Repeat:
See Full Description.
>Fix:
Fix mod_alias or change the documentation.
>Release-Note:
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, you need]
[to include <ap...@Apache.Org> in the Cc line and make sure the]
[subject line starts with the report component and number, with ]
[or without any 'Re:' prefixes (such as "general/1098:" or ]
["Re: general/1098:"). If the subject doesn't match this ]
[pattern, your message will be misfiled and ignored. The ]
["apbugs" address is not added to the Cc line of messages from ]
[the database automatically because of the potential for mail ]
[loops. If you do not include this Cc, your reply may be ig- ]
[nored unless you are responding to an explicit request from a ]
[developer. Reply only with text; DO NOT SEND ATTACHMENTS! ]