You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2009/07/06 15:10:04 UTC

DO NOT REPLY [Bug 43698] Apache AllowOverride Groups Reorganize Proposal

https://issues.apache.org/bugzilla/show_bug.cgi?id=43698





--- Comment #6 from Kevin Fernandez <si...@gmail.com>  2009-07-06 06:09:57 PST ---
Any update on this?

It seems to be an important part of the Apache security, i was wondering
exactly the same than this guy and it seems there is no solution.
It would be great if we could allow/disallow specific directives with
Allowoverride, not just allow/disallow groups, just like you did with
Options=directive in httpd 2.2, but for fileinfo and others as
addhandler/sethandler/action are quite dangerous on web hostings and a few
people care about it :(
Also a default setting for allowoverride to None would be great in future
versions, it would make people understand why allowoverride has to be
configured carefully..
Thanks a lot, i hope you will do something!

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org