mainSavannah Administration - Support: sr #106321, Please allow for .htaccess files

 
 

sr #106321: Please allow for .htaccess files

Submitter:  Joerg Wunsch <joerg_wunsch>
Submitted:  Thu 27 Mar 2008 10:17:38 AM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  None
Privacy:  Public Assigned to:  Beuc
Operating System:  None Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Thu 27 Mar 2008 06:33:24 PM UTC, comment #1: 

Hi,

This machine is under the exclusive control of sysadmin@gnu.org.
Can you direct your query there?

Sylvain Beucler <Beuc>
Thu 27 Mar 2008 10:17:38 AM UTC, original submission:  

https://savannah.gnu.org/maintenance/HomePage

tells that .htaccess files are disabled for security reasons.
However, that justification also prevents many useful things,
like properly declaring MIME types and character sets (see
sr #105884 for one example).  The workaround using the
http-equiv meta tag is a crock because it requires the
browser to reload the page once it parsed that tag, and
overriding MIME types is completely impossible that way.

Apache offers enough means to restrict the .htaccess use
to those directives that can be considered safe within
the server's context, so abusing them to get around the
symlink restrictions (which is used as the reasoning in
the above documentation link) can be safely prevented.

Joerg Wunsch <joerg_wunsch>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by Beuc (Posted a comment)
  • -email is unavailable- added by joerg_wunsch (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2008-03-27 Beuc Assigned toNone Beuc
        Open/ClosedOpen Closed

    Back to the top

    Powered by Savane 3.13-4b48.
    Corresponding source code