You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by co...@apache.org on 2024/07/03 22:29:47 UTC
svn commit: r1918892 - /httpd/httpd/trunk/docs/manual/mod/core.xml
Author: covener
Date: Wed Jul 3 22:29:46 2024
New Revision: 1918892
URL: http://svn.apache.org/viewvc?rev=1918892&view=rev
Log:
mention quirks, add example, clarify
Modified:
httpd/httpd/trunk/docs/manual/mod/core.xml
Modified: httpd/httpd/trunk/docs/manual/mod/core.xml
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/core.xml?rev=1918892&r1=1918891&r2=1918892&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/mod/core.xml (original)
+++ httpd/httpd/trunk/docs/manual/mod/core.xml Wed Jul 3 22:29:46 2024
@@ -5322,7 +5322,7 @@ recognized methods to modules.</p>
<name>UNCList</name>
<description>Controls what UNC host names can be accessed by the server
</description>
-<syntax>UNCList<var>hostname</var> ...</syntax>
+<syntax>UNCList <var>hostname</var> [<var>hostname</var>...]</syntax>
<default>unset</default>
<contextlist><context>server config</context>
</contextlist>
@@ -5334,17 +5334,24 @@ recognized methods to modules.</p>
has been specified by this directive. The intent is to limit access to
paths derived from untrusted inputs.</p>
-<note type="warning"><title>Security</title>
-<p>UNC paths accessed outside of request processing, such as during startup,
-are not checked against the hosts configured with this directive.</p>
-</note>
+ <example>
+ UNCList example.com other.example.com
+ </example>
+
+ <note type="warning"><title>Security</title>
+ <p>UNC paths accessed outside of request processing, such as during startup,
+ are not necessarily checked against the hosts configured with this directive.</p>
+ </note>
+
+ <note type="warning"><title>Directive Ordering</title>
+ <p>This directive should be placed before UNC paths used in httpd.conf.
+ Multiple occurrences of the directive reset the list.</p>
+ </note>
+
</usage>
</directivesynopsis>
-UNCList
-
-
<directivesynopsis>
<name>MergeTrailers</name>
<description>Determines whether trailers are merged into headers</description>