You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Dean Gaudet <dg...@arctic.org> on 1997/02/02 05:40:10 UTC
[PATCH] docs, remove possible security confusion
The docs show some examples using <Limit GET POST> ... </Limit> where the
<Limit>s are not strictly required. Since it is less secure to specify
them than it is to leave them out I think the examples should be modified.
If they're to be left in, then some of them need < ... >.
Dean
Index: manual/location.html
===================================================================
RCS file: /export/home/cvs/apache/htdocs/manual/location.html,v
retrieving revision 1.4
diff -c -3 -r1.4 location.html
*** location.html 1996/12/12 01:09:40 1.4
--- location.html 1997/02/02 04:36:10
***************
*** 40,50 ****
<pre>
<Location /status>
SetHandler server-status
- <Limit GET>
order deny,allow
deny from all
allow from .foo.com
- </Limit>
</Location>
</pre>
--- 40,48 ----
Index: manual/mod/core.html
===================================================================
RCS file: /export/home/cvs/apache/htdocs/manual/mod/core.html,v
retrieving revision 1.32
diff -c -3 -r1.32 core.html
*** core.html 1997/01/31 00:55:12 1.32
--- core.html 1997/02/02 04:36:11
***************
*** 666,676 ****
<pre>
<Location /status>
SetHandler server-status
- <Limit GET>
order deny,allow
deny from all
allow from .foo.com
- </Limit>
</Location>
</pre>
<hr>
--- 666,674 ----
Index: manual/mod/mod_access.html
===================================================================
RCS file: /export/home/cvs/apache/htdocs/manual/mod/mod_access.html,v
retrieving revision 1.2
diff -c -3 -r1.2 mod_access.html
*** mod_access.html 1996/11/21 10:30:37 1.2
--- mod_access.html 1997/02/02 04:36:11
***************
*** 30,37 ****
<strong>Status:</strong> Base<br>
<strong>Module:</strong> mod_access<p>
! The allow directive affects which hosts can access a given directory; it is
! typically used within a <A HREF="core.html#limit"><Limit></A> section.
<em>Host</em> is one of the following:
<dl>
<dt><code>all</code>
--- 30,36 ----
<strong>Status:</strong> Base<br>
<strong>Module:</strong> mod_access<p>
! The allow directive affects which hosts can access a given directory.
<em>Host</em> is one of the following:
<dl>
<dt><code>all</code>
***************
*** 60,67 ****
<strong>Status:</strong> Base<br>
<strong>Module:</strong> mod_access<p>
! The deny directive affects which hosts can access a given directory; it is
! typically used within a <A HREF="core.html#limit"><Limit></A> section.
<em>Host</em> is one of the following:
<dl>
<dt><code>all</code>
--- 59,65 ----
<strong>Status:</strong> Base<br>
<strong>Module:</strong> mod_access<p>
! The deny directive affects which hosts can access a given directory.
<em>Host</em> is one of the following:
<dl>
<dt><code>all</code>
Index: manual/mod/mod_status.html
===================================================================
RCS file: /export/home/cvs/apache/htdocs/manual/mod/mod_status.html,v
retrieving revision 1.2
diff -c -3 -r1.2 mod_status.html
*** mod_status.html 1996/11/21 10:30:53 1.2
--- mod_status.html 1997/02/02 04:36:11
***************
*** 45,55 ****
<Location /server-status>
SetHandler server-status
- <Limit GET POST>
order deny,allow
deny from all
allow from .foo.com
- </Limit>
</Location>
</pre>
<p>
--- 45,53 ----