You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by co...@apache.org on 2017/06/07 00:24:31 UTC

svn commit: r1797843 - /httpd/httpd/trunk/modules/proxy/mod_proxy.c

Author: covener
Date: Wed Jun  7 00:24:31 2017
New Revision: 1797843

URL: http://svn.apache.org/viewvc?rev=1797843&view=rev
Log:
remove taint checking from proxy_handler

rewrite tests with P flag in htaccess broken since r1792169

Modified:
    httpd/httpd/trunk/modules/proxy/mod_proxy.c

Modified: httpd/httpd/trunk/modules/proxy/mod_proxy.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy.c?rev=1797843&r1=1797842&r2=1797843&view=diff
==============================================================================
--- httpd/httpd/trunk/modules/proxy/mod_proxy.c (original)
+++ httpd/httpd/trunk/modules/proxy/mod_proxy.c Wed Jun  7 00:24:31 2017
@@ -1025,13 +1025,6 @@ static int proxy_handler(request_rec *r)
         return DECLINED;
     }
 
-    /* A request that has passed through .htaccess has no business
-     * serving contents from so far outside its directory.
-     */
-    if (ap_request_tainted(r, AP_TAINT_HTACCESS)) {
-        return DECLINED;
-    }
-
     if (!r->proxyreq) {
         /* We may have forced the proxy handler via config or .htaccess */
         if (r->handler &&