You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@httpd.apache.org by Lars Eilebrecht <la...@eilebrecht.net> on 2010/10/21 17:48:01 UTC

Re: Removing Limit and LimitExcept (was: svn commit: r1023227 - in /httpd/httpd/trunk: CHANGES server/core.c)

Jim Jagielski wrote:

> ++1.
> 
> On Oct 19, 2010, at 3:28 PM, Roy T. Fielding wrote:
> 
> > IMO, removing Limit and LimitExcept would require a bump to httpd 3.x,
> > since it would break almost all existing configs and introduce security
> > holes if the installer is not prepared to rewrite them.
> > 
> > Deprecating Limit and LimitExcept can be done in 2.4.x, which means
> > keeping their functionality intact and warning at startup that the
> > feature is less good than the new directives.
> > 
> > ....Roy

Big +1 


cheers
-- 
Lars Eilebrecht
lars@eilebrecht.net