You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2003/02/27 12:27:09 UTC

DO NOT REPLY [Bug 17462] - Prevent mod_rewrite from deadlooping

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=17462>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=17462

Prevent mod_rewrite from deadlooping

nd@perlig.de changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|Critical                    |Enhancement
             Status|NEW                         |ASSIGNED
            Summary|mod_rewrite DoS             |Prevent mod_rewrite from
                   |                            |deadlooping
            Version|1.3.27                      |HEAD



------- Additional Comments From nd@perlig.de  2003-02-27 11:27 -------
he, you'll need a better system that finishs this endless loop under one minute ;-)

It's a known issue. You're simply creating an endless loop of internal
redirects. Thatswhy you already should test your rules before putting them on a
production server.

However, I'm changing this to an Enhancement request. We should be able to set a
configurable limit of maximum redirects issued by mod_rewrite.

Thanks for using Apache!

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org