You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@subversion.apache.org by Michael Sinz <Mi...@sinz.org> on 2005/11/12 03:29:19 UTC

[PATCH] Fix ":" path name issues and cross-site security in mod_dav_svn

This is a reminder about issue #2423 which describes a problem with mod_dav_svn
and file/path names with ":" in them.

This should (IMHO) be a candidate for 1.3.x backport (and 1.2.x?) due to both
the security/privacy issue and the fact that the fix is rather simple.

See <http://svn.haxx.se/dev/archive-2005-11/0224.shtml> and the patch at
<http://subversion.tigris.org/nonav/issues/showattachment.cgi/518/svn-colon.patch>

-- 
Michael Sinz                     Technology and Engineering Director/Consultant
"Starting Startups"                                mailto:michael.sinz@sinz.org
My place on the web                            http://www.sinz.org/Michael.Sinz