From: Andre Malo Date: Mon, 27 Jan 2014 08:11:57 +0000 (+0000) Subject: update transformation X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8f0e34370a15f37167706e9719913acde9697fbf;p=thirdparty%2Fapache%2Fhttpd.git update transformation git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1561601 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/env.html.en b/docs/manual/env.html.en index 787df2dccdd..dfcfc164958 100644 --- a/docs/manual/env.html.en +++ b/docs/manual/env.html.en @@ -406,7 +406,7 @@

Starting with version 2.4, Apache is more strict about how HTTP - headers are converted to environment variables in mod_cgi + headers are converted to environment variables in mod_cgi and other modules: Previously any invalid characters in header names were simply translated to underscores. This allowed for some potential cross-site-scripting attacks via header injection @@ -414,7 +414,7 @@ Unusual Web Bugs, slide 19/20).

If you have to support a client which sends broken headers and - which can't be fixed, a simple workaround involving mod_setenvif + which can't be fixed, a simple workaround involving mod_setenvif and mod_headers allows you to still accept these headers:

diff --git a/docs/manual/misc/perf-scaling.html.en b/docs/manual/misc/perf-scaling.html.en index a46f0bcad9d..cf8b5997485 100644 --- a/docs/manual/misc/perf-scaling.html.en +++ b/docs/manual/misc/perf-scaling.html.en @@ -1292,7 +1292,7 @@ Swap: 3903784 12540 3891244 code, but is not compiled by default. It can be built with the server by passing the option --enable-rewrite[=shared] to the configure command. Many binary distributions of - Apache come with mod_rewrite included. The following is an + Apache come with mod_rewrite included. The following is an example of an Apache virtual host that takes advantage of pre-rendered blog pages: