You are viewing a plain text version of this content. The canonical link for it is here.
Posted to apache-bugdb@apache.org by pc...@hyperreal.com on 1997/05/15 23:55:10 UTC

Changed information for PR documentation/586

Synopsis: Clarity on <Location> usage

State-Changed-From-To: open-feedback
State-Changed-By: pcs
State-Changed-When: Thu May 15 14:55:09 PDT 1997
State-Changed-Why:
<Location> can contain exactly the same directives as 
<Directory>. However your example looks like you are 
trying to match against a directory. <Location> does 
not match against directories - it matches against 
(the start of) the requested URL. This is documented - the 
syntax for <Location> is 

  <Location URL> 
The docs probably could be clearer though. However does 
this explain the situation ok for now?



Re: Changed information for PR documentation/586

Posted by Daniel Rinehart <da...@ccs.neu.edu>.
> <Location> can contain exactly the same directives as <Directory>.
> The docs probably could be clearer though. However does 
> this explain the situation ok for now?
	If it is the case that <Location> can contain the Options and
AllowOverride directives, then there is a bug in <Location> that doesn't
check for symlinks. In this case all requests for /home/* pass through the
following RewriteRule:

RewriteRule     ^/home/([^/]*)/?(.*)    /home/$1/.www/$2 [L]

	I've also setup the following <Location> rule:

<Location /home/*>
Options Indexes
AllowOverride None
</Location>

	However when accessing /home/danielr/test/bad-link were:
lrwxrwxrwx   1 danielr  majors         11 May 15 13:55 bad-link -> /etc/passwd
-r--r--r--   1 root     wheel         790 Dec 11 15:25 /etc/passwd

	I would suspect it to fail, but instead it happily gives me the
document. Not what I really want to have happen.

- Daniel R. <da...@ccs.neu.edu> [http://www.ccs.neu.edu/home/danielr/]