You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Martin Kraemer <Ma...@Fujitsu-Siemens.com> on 2002/05/29 08:53:09 UTC

mod_info flaw

In the output of mod_info, sometimes a container header
(like: <Limit ...>) is duplicated. Here's a snippet from
the output of the current www.apache.org server, and at
line 26, an extra <Limit> header was added (dup of 24).
(At the end, I attach the relevant part from httpd.conf)

(Sorry about line 6: Mozilla does not break lines copied
from mod_info's output :-( )
 1 Module Name: mod_access.c
 2 Content handlers: none
 3 Configuration Phase Participation: Create Directory Config
 4 Request Phase Participation: Check Access
 5 Module Directives:
 6 order - 'allow,deny', 'deny,allow', or 'mutual-failure'allow - 'from' followed by hostnames or IP-address wildcardsdeny - 'from' followed by hostnames or IP-address wildcardsCurrent Configuration:
 7 <Files ~ "^\.ht">
 8   Order allow,deny
 9   Deny from all
10 </Files>
11 <Directory "/usr/local/apache/icons">
12   Order allow,deny
13   Allow from all
14 </Directory>
15 <Location /cgi-bin/phf*>
16   Deny from all
17 </Location>
18 <Directory />
19   deny from env=badrobot
20 </Directory>
21 <Directory /www>
22   deny from env=badrobot
23 </Directory>
24 <Limit GET POST OPTIONS PROPFIND>
25     Order allow,deny
26 <Limit GET POST OPTIONS PROPFIND>
27     Allow from all
28 </Limit>
29 <Limit PUT DELETE PATCH PROPPATCH MKCOL COPY MOVE LOCK UNLOCK>
30     Order deny,allow
31     Deny from all
32 </Limit>

--snip--
<Directory /home/*/public_html>
    AllowOverride FileInfo AuthConfig Limit
    Options MultiViews Indexes SymLinksIfOwnerMatch Includes ExecCGI
    <Limit GET POST OPTIONS PROPFIND>
        Order allow,deny
        Allow from all
    </Limit>
    <Limit PUT DELETE PATCH PROPPATCH MKCOL COPY MOVE LOCK UNLOCK>
        Order deny,allow
        Deny from all
    </Limit>
</Directory>
--snip--

-- 
<Ma...@Fujitsu-Siemens.com>         |     Fujitsu Siemens
Fon: +49-89-636-46021, FAX: +49-89-636-47655 | 81730  Munich,  Germany