From: Christophe Jaillet $N
in the substitution string!
UnsafePrefixStat
Allows potentially unsafe substitutions from a leading variable or backreference to a filesystem path.
- details ...
+ details ...
+
diff --git a/docs/manual/rewrite/flags.xml b/docs/manual/rewrite/flags.xml
index 7d638aaf875..9e287ec9ee4 100644
--- a/docs/manual/rewrite/flags.xml
+++ b/docs/manual/rewrite/flags.xml
@@ -865,11 +865,15 @@ The UNC
Prevents the merging of multiple leading slashes, as used by Windows UNC paths.
- details ...
+ details ...
+ L
flag can be useful in this context to end the
These substitutions are not prefixed with the document root.
This protects from a malicious URL causing the expanded substitution to
map to an unexpected filesystem location.
Setting this flag prevents the merging of multiple leading slashes, as used in Windows UNC paths. The flag is not necessary when the rules - substitution starts with multiple literal slashes.
+ substitution starts with multiple literal slashes. + +