From: Christophe Jaillet $N
in the substitution string!
UnsafePrefixStat
Allows potentially unsafe substitutions from a leading variable or backreference to a filesystem path.
- details ...
+ details ...
+
diff --git a/docs/manual/rewrite/flags.xml b/docs/manual/rewrite/flags.xml
index 0b9ccfa9a89..d46ba088182 100644
--- a/docs/manual/rewrite/flags.xml
+++ b/docs/manual/rewrite/flags.xml
@@ -865,11 +865,15 @@ The UNC
Prevents the merging of multiple leading slashes, as used by Windows UNC paths.
- details ...
+ details ...
+ L
flag can be useful in this context to end the
These substitutions are not prefixed with the document root.
This protects from a malicious URL causing the expanded substitution to
map to an unexpected filesystem location.
Setting this flag prevents the merging of multiple leading slashes, as used in Windows UNC paths. The flag is not necessary when the rules - substitution starts with multiple literal slashes.
+ substitution starts with multiple literal slashes. + +