]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
* Make aliases more robust against potential traversal attacks, by using
authorRuediger Pluem <rpluem@apache.org>
Fri, 8 Oct 2021 10:49:06 +0000 (10:49 +0000)
committerRuediger Pluem <rpluem@apache.org>
Fri, 8 Oct 2021 10:49:06 +0000 (10:49 +0000)
commitd8b3d1f0f6ed16ff6f83a30513aac573a8a44c34
tree2ebd8a09d1880fdc63c3295729b8ede7f9f92b96
parent861c15e03c41851de1157c15b9a4f737967cd5fc
* Make aliases more robust against potential traversal attacks, by using
  apr_filepath_merge to merge the real path and the remainder of the fake
  path like we do in the same situation for resources mapped by
  DocumentRoot.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1894024 13f79535-47bb-0310-9956-ffa450edef68
docs/log-message-tags/next-number
modules/mappers/mod_alias.c