*) Win32; Never invoke cmd or bat scripts based on the registry, even
for 'ScriptInterpreterSource Registry' enabled. [William Rowe]
- *) Provide Win32 users a log of the cgi command invoked, to assist
+ *) Provide Win32 users a log of the cgi command invoked, to assist
in debugging scripts at LogLevel info. Also provide env vars
at LogLevel debug for additional help to admins troubleshooting
the ever mysterious "Premature end of script headers" error.
[Aaron Bannert]
- *) Added the 'CgiCommandArgs off' directive, to allow admins
+ *) Added the 'CGICommandArgs off' directive, to allow admins
to disable the query argument passing mechanism in Apache,
- if future cgi arguments vulnerabilities should be discovered.
- [Aaron Bannert]
+ if future CGI argument vulnerabilities should be discovered.
+ This defaults to 'on', meaning isindex-style query arguments
+ are enabled. [Aaron Bannert]
*) When a proxied site was being served, Apache was replacing
the original site Server header with it's own, which is not