From: Graham Leggett Date: Tue, 29 Apr 2014 21:32:49 +0000 (+0000) Subject: Properly escape the < and >. X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4d2a8015972f70ed0b06d5183207d9e7a6477489;p=thirdparty%2Fapache%2Fhttpd.git Properly escape the < and >. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1591113 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/mod/mod_authnz_ldap.xml b/docs/manual/mod/mod_authnz_ldap.xml index 970e35537fd..1da4cf58c49 100644 --- a/docs/manual/mod/mod_authnz_ldap.xml +++ b/docs/manual/mod/mod_authnz_ldap.xml @@ -507,7 +507,7 @@ AuthLDAPMaxSubGroupDepth 1 LDAP injection. The ldap function can be used for this purpose.

-<LocationMatch ^/dav/(?[^/]+)/> +<LocationMatch ^/dav/(?<SITENAME>[^/]+)/> Require ldap-filter (memberOf=cn=%{ldap:%{unescape:%{env:MATCH_SITENAME}},ou=Websites,o=Example) </LocationMatch> @@ -525,7 +525,7 @@ AuthLDAPMaxSubGroupDepth 1 LDAP server:

-<LocationMatch ^/dav/(?[^/]+)/> +<LocationMatch ^/dav/(?<SITENAME>[^/]+)/> Require ldap-search (cn=%{ldap:%{unescape:%{env:MATCH_SITENAME}} Website) </LocationMatch>