From a08043caada8b9b31089a822981a555dc1a47bdd Mon Sep 17 00:00:00 2001 From: Daniel Earl Poirier Date: Thu, 17 Mar 2011 18:44:19 +0000 Subject: [PATCH] Update transforms git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1082632 13f79535-47bb-0310-9956-ffa450edef68 --- docs/manual/mod/core.html.en | 23 +++++++++++++------ docs/manual/mod/core.html.tr.utf8 | 1 + docs/manual/mod/core.xml.de | 2 +- docs/manual/mod/core.xml.ja | 2 +- docs/manual/mod/core.xml.meta | 2 +- docs/manual/mod/core.xml.tr | 2 +- docs/manual/mod/quickreference.html.en | 2 +- docs/manual/mod/quickreference.html.es | 2 +- docs/manual/mod/quickreference.html.ko.euc-kr | 2 +- docs/manual/mod/quickreference.html.ru.koi8-r | 2 +- docs/manual/mod/quickreference.html.zh-cn | 2 +- 11 files changed, 26 insertions(+), 16 deletions(-) diff --git a/docs/manual/mod/core.html.en b/docs/manual/mod/core.html.en index 80b44f69f2f..2dc3db790bd 100644 --- a/docs/manual/mod/core.html.en +++ b/docs/manual/mod/core.html.en @@ -389,26 +389,35 @@ content-type is text/plain or text/html - + - +
Description:Determines whether encoded path separators in URLs are allowed to be passed through
Syntax:AllowEncodedSlashes On|Off
Syntax:AllowEncodedSlashes On|Off|NoDecode
Default:AllowEncodedSlashes Off
Context:server config, virtual host
Status:Core
Module:core
Compatibility:Available in Apache 2.0.46 and later
Compatibility:Available in Apache httpd 2.0.46 and later. +NoDecode option available in 2.2.18 and later.

The AllowEncodedSlashes directive allows URLs which contain encoded path separators (%2F for / and additionally %5C for \ on according systems) - to be used. Normally such URLs are refused with a 404 (Not found) error.

+ to be used in the path info.

+ +

With the default value, Off, such URLs are refused + with a 404 (Not found) error.

+ +

With the value On, such URLs are accepted, and encoded + slashes are decoded like all other encoded characters.

+ +

With the value NoDecode, such URLs are accepted, but + encoded slashes are not decoded but left in their encoded state.

Turning AllowEncodedSlashes On is mostly useful when used in conjunction with PATH_INFO.

Note

-

Allowing encoded slashes does not imply decoding. - Occurrences of %2F or %5C (only on - according systems) will be left as such in the otherwise decoded URL - string.

+

If encoded slashes are needed in path info, use of NoDecode is + strongly recommended as a security measure. Allowing slashes + to be decoded could potentially allow unsafe paths.

See also

diff --git a/docs/manual/mod/core.html.tr.utf8 b/docs/manual/mod/core.html.tr.utf8 index 155a8c7431d..e62d58c60f3 100644 --- a/docs/manual/mod/core.html.tr.utf8 +++ b/docs/manual/mod/core.html.tr.utf8 @@ -27,6 +27,7 @@  ja  |  tr 

+
Bu çeviri güncel olmayabilir. Son değişiklikler için İngilizce sürüm geçerlidir.
Açıklama:Apache HTTP Sunucusunda daima mevcut olan çekirdek özellikler
Durum:Çekirdek
diff --git a/docs/manual/mod/core.xml.de b/docs/manual/mod/core.xml.de index 683c1d07b95..2d6891e3130 100644 --- a/docs/manual/mod/core.xml.de +++ b/docs/manual/mod/core.xml.de @@ -1,7 +1,7 @@ - + + +