From: Joshua Slive
Date: Tue, 3 May 2005 19:16:43 +0000 (+0000)
Subject: Backport:
X-Git-Tag: 2.0.55~227
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=269410f87138eae691e44218c731c7d342cd5efd;p=thirdparty%2Fapache%2Fhttpd.git
Backport:
ErrorDocument updates.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@167961 13f79535-47bb-0310-9956-ffa450edef68
---
diff --git a/docs/manual/mod/core.xml b/docs/manual/mod/core.xml
index 1e76986dcec..134c8a84802 100644
--- a/docs/manual/mod/core.xml
+++ b/docs/manual/mod/core.xml
@@ -898,9 +898,10 @@ in case of an error
or a message. Apache will sometimes offer additional information
regarding the problem/error.
- URLs can begin with a slash (/) for local URLs, or be a full
- URL which the client can resolve. Alternatively, a message can
- be provided to be displayed by the browser. Examples:
+ URLs can begin with a slash (/) for local web-paths (relative
+ to the DocumentRoot), or be a
+ full URL which the client can resolve. Alternatively, a message
+ can be provided to be displayed by the browser. Examples:
ErrorDocument 500 http://foo.example.com/cgi-bin/tester
@@ -950,6 +951,14 @@ in case of an error
href="http://support.microsoft.com/default.aspx?scid=kb;en-us;Q294807"
>Q294807.
+ Although most error messages can be overriden, there are certain
+ circumstances where the internal messages are used regardless of the
+ setting of ErrorDocument. In
+ particular, if a malformed request is detected, normal request processing
+ will be immediately halted and the internal error message returned.
+ This is necessary to guard against security problems caused by
+ bad requests.
+
Prior to version 2.0, messages were indicated by prefixing
them with a single unmatched double quote character.