From: Graham Leggett
Date: Tue, 29 Apr 2014 21:32:49 +0000 (+0000)
Subject: Properly escape the < and >.
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4d2a8015972f70ed0b06d5183207d9e7a6477489;p=thirdparty%2Fapache%2Fhttpd.git
Properly escape the < and >.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1591113 13f79535-47bb-0310-9956-ffa450edef68
---
diff --git a/docs/manual/mod/mod_authnz_ldap.xml b/docs/manual/mod/mod_authnz_ldap.xml
index 970e35537fd..1da4cf58c49 100644
--- a/docs/manual/mod/mod_authnz_ldap.xml
+++ b/docs/manual/mod/mod_authnz_ldap.xml
@@ -507,7 +507,7 @@ AuthLDAPMaxSubGroupDepth 1
LDAP injection. The ldap function can be used for this purpose.
-<LocationMatch ^/dav/(?[^/]+)/>
+<LocationMatch ^/dav/(?<SITENAME>[^/]+)/>
Require ldap-filter (memberOf=cn=%{ldap:%{unescape:%{env:MATCH_SITENAME}},ou=Websites,o=Example)
</LocationMatch>
@@ -525,7 +525,7 @@ AuthLDAPMaxSubGroupDepth 1
LDAP server:
-<LocationMatch ^/dav/(?[^/]+)/>
+<LocationMatch ^/dav/(?<SITENAME>[^/]+)/>
Require ldap-search (cn=%{ldap:%{unescape:%{env:MATCH_SITENAME}} Website)
</LocationMatch>