From: Colm MacCarthaigh Date: Sat, 29 Oct 2005 10:12:06 +0000 (+0000) Subject: Update the transformations X-Git-Tag: 2.1.9~5 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a5300c4d3f9ab988f9154edd4069bedece3a0c94;p=thirdparty%2Fapache%2Fhttpd.git Update the transformations git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@329392 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/caching.html.en b/docs/manual/caching.html.en index fd4c5caaf4d..6d4f835f7db 100644 --- a/docs/manual/caching.html.en +++ b/docs/manual/caching.html.en @@ -297,6 +297,31 @@ Vary: negotiate,accept-language,accept-charset

Security Considerations

+

Authorisation, Access & and Control

+ + +

Using mod_cache is very much like having a built + in reverse-proxy. Requests will be served by the caching module unless + it determines that the backend should be queried. When caching local + resources, this drastically changes the security model of Apache.

+ +

As traversing a filesystem hierarchy to examine potential + .htaccess files would be a very expensive operation, + partially defeating the point of caching (to speed up requests), + mod_cache makes no decision about whether a cached + entity is authorised for serving. In other words; if + mod_cache has cached some content, it will be served + from the cache as long as that content has not expired.

+ +

If, for example, your configuration permits access to a resource by IP + address you should ensure that this content is not cached. You can do this by + using the CacheDisable + directive, or mod_expires. Left unchecked, + mod_cache - very much like a reverse proxy - would cache + the content when served and then serve it to any client, on any IP + address.

+ +

Local exploits

diff --git a/docs/manual/mod/allmodules.xml b/docs/manual/mod/allmodules.xml index b79707c6197..03cb9beff74 100644 --- a/docs/manual/mod/allmodules.xml +++ b/docs/manual/mod/allmodules.xml @@ -9,6 +9,7 @@ mod_auth_digest.xml mod_authn_alias.xml mod_authn_anon.xml + mod_authn_dbd.xml mod_authn_dbm.xml mod_authn_default.xml mod_authn_file.xml diff --git a/docs/manual/mod/allmodules.xml.de b/docs/manual/mod/allmodules.xml.de index a554febca8b..fd8535a5b59 100644 --- a/docs/manual/mod/allmodules.xml.de +++ b/docs/manual/mod/allmodules.xml.de @@ -9,6 +9,7 @@ mod_auth_digest.xml mod_authn_alias.xml mod_authn_anon.xml + mod_authn_dbd.xml mod_authn_dbm.xml mod_authn_default.xml mod_authn_file.xml diff --git a/docs/manual/mod/allmodules.xml.es b/docs/manual/mod/allmodules.xml.es index 64523e6c9ee..62090409fe3 100644 --- a/docs/manual/mod/allmodules.xml.es +++ b/docs/manual/mod/allmodules.xml.es @@ -9,6 +9,7 @@ mod_auth_digest.xml mod_authn_alias.xml mod_authn_anon.xml + mod_authn_dbd.xml mod_authn_dbm.xml mod_authn_default.xml mod_authn_file.xml diff --git a/docs/manual/mod/allmodules.xml.ja b/docs/manual/mod/allmodules.xml.ja index 9b5096284bc..eb3eefae492 100644 --- a/docs/manual/mod/allmodules.xml.ja +++ b/docs/manual/mod/allmodules.xml.ja @@ -9,6 +9,7 @@ mod_auth_digest.xml mod_authn_alias.xml mod_authn_anon.xml.ja + mod_authn_dbd.xml mod_authn_dbm.xml.ja mod_authn_default.xml.ja mod_authn_file.xml.ja diff --git a/docs/manual/mod/allmodules.xml.ko b/docs/manual/mod/allmodules.xml.ko index 7b559a5faa2..0c9b3d47cac 100644 --- a/docs/manual/mod/allmodules.xml.ko +++ b/docs/manual/mod/allmodules.xml.ko @@ -9,6 +9,7 @@ mod_auth_digest.xml.ko mod_authn_alias.xml mod_authn_anon.xml.ko + mod_authn_dbd.xml mod_authn_dbm.xml.ko mod_authn_default.xml.ko mod_authn_file.xml.ko diff --git a/docs/manual/mod/directives.html.de b/docs/manual/mod/directives.html.de index 3b8740c4d8e..eb261a73828 100644 --- a/docs/manual/mod/directives.html.de +++ b/docs/manual/mod/directives.html.de @@ -75,6 +75,8 @@
  • AssignUserID
  • AuthBasicAuthoritative
  • AuthBasicProvider
    • +
  • AuthDBDUserPWQuery
    • +
  • AuthDBDUserRealmQuery
  • AuthDBMGroupFile
  • AuthDBMType
  • AuthDBMUserFile
    • diff --git a/docs/manual/mod/directives.html.en b/docs/manual/mod/directives.html.en index db938f09dd6..dfdac70e44e 100644 --- a/docs/manual/mod/directives.html.en +++ b/docs/manual/mod/directives.html.en @@ -77,6 +77,8 @@
  • AssignUserID
  • AuthBasicAuthoritative
  • AuthBasicProvider
    • +
  • AuthDBDUserPWQuery
    • +
  • AuthDBDUserRealmQuery
  • AuthDBMGroupFile
  • AuthDBMType
  • AuthDBMUserFile
    • diff --git a/docs/manual/mod/directives.html.es b/docs/manual/mod/directives.html.es index aa76cd9777b..25763b48c01 100644 --- a/docs/manual/mod/directives.html.es +++ b/docs/manual/mod/directives.html.es @@ -79,6 +79,8 @@
  • AssignUserID
  • AuthBasicAuthoritative
  • AuthBasicProvider
    • +
  • AuthDBDUserPWQuery
    • +
  • AuthDBDUserRealmQuery
  • AuthDBMGroupFile
  • AuthDBMType
  • AuthDBMUserFile
    • diff --git a/docs/manual/mod/directives.html.ja.euc-jp b/docs/manual/mod/directives.html.ja.euc-jp index ad329037290..3eba7d077e7 100644 --- a/docs/manual/mod/directives.html.ja.euc-jp +++ b/docs/manual/mod/directives.html.ja.euc-jp @@ -74,6 +74,8 @@
  • AssignUserID
  • AuthBasicAuthoritative
  • AuthBasicProvider
    • +
  • AuthDBDUserPWQuery
    • +
  • AuthDBDUserRealmQuery
  • AuthDBMGroupFile
  • AuthDBMType
  • AuthDBMUserFile
    • diff --git a/docs/manual/mod/directives.html.ko.euc-kr b/docs/manual/mod/directives.html.ko.euc-kr index 2f8ab24c490..75727f3fc69 100644 --- a/docs/manual/mod/directives.html.ko.euc-kr +++ b/docs/manual/mod/directives.html.ko.euc-kr @@ -74,6 +74,8 @@
  • AssignUserID
  • AuthBasicAuthoritative
  • AuthBasicProvider
    • +
  • AuthDBDUserPWQuery
    • +
  • AuthDBDUserRealmQuery
  • AuthDBMGroupFile
  • AuthDBMType
  • AuthDBMUserFile
    • diff --git a/docs/manual/mod/index.html.de b/docs/manual/mod/index.html.de index 75df7a2ea37..54cc078bec9 100644 --- a/docs/manual/mod/index.html.de +++ b/docs/manual/mod/index.html.de @@ -85,6 +85,7 @@ HTTP headers providers based on actual providers
    mod_authn_anon
    Allows "anonymous" user access to authenticated areas
    +
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    User authentication using DBM files
    mod_authn_default
    Authentication fallback module
    mod_authn_file
    User authentication using text files
    diff --git a/docs/manual/mod/index.html.en b/docs/manual/mod/index.html.en index fde3e72f5ce..e6aef80777e 100644 --- a/docs/manual/mod/index.html.en +++ b/docs/manual/mod/index.html.en @@ -83,6 +83,7 @@ HTTP headers providers based on actual providers
    mod_authn_anon
    Allows "anonymous" user access to authenticated areas
    +
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    User authentication using DBM files
    mod_authn_default
    Authentication fallback module
    mod_authn_file
    User authentication using text files
    diff --git a/docs/manual/mod/index.html.es b/docs/manual/mod/index.html.es index 2a5b17f029a..b305a229085 100644 --- a/docs/manual/mod/index.html.es +++ b/docs/manual/mod/index.html.es @@ -86,6 +86,7 @@ HTTP headers providers based on actual providers
    mod_authn_anon
    Allows "anonymous" user access to authenticated areas
    +
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    User authentication using DBM files
    mod_authn_default
    Authentication fallback module
    mod_authn_file
    User authentication using text files
    diff --git a/docs/manual/mod/index.html.ja.euc-jp b/docs/manual/mod/index.html.ja.euc-jp index 62c77abd6e8..5f66e55c403 100644 --- a/docs/manual/mod/index.html.ja.euc-jp +++ b/docs/manual/mod/index.html.ja.euc-jp @@ -80,6 +80,7 @@ CGI providers based on actual providers
    mod_authn_anon
    ǧ¾Ú¤¬É¬ÍפÊÎΰè¤Ø¤Î "anonymous" ¥æ¡¼¥¶¤Î¥¢¥¯¥»¥¹¤òµö²Ä¤¹¤ë
    +
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    DBM ¥Õ¥¡¥¤¥ë¤òÍѤ¤¤¿¥æ¡¼¥¶Ç§¾Ú
    mod_authn_default
    ǧ¾Ú¥Õ¥©¡¼¥ë¥Ð¥Ã¥¯¥â¥¸¥å¡¼¥ë
    mod_authn_file
    ¥Æ¥­¥¹¥È¥Õ¥¡¥¤¥ë¤òÍѤ¤¤¿¥æ¡¼¥¶Ç§¾Ú
    diff --git a/docs/manual/mod/index.html.ko.euc-kr b/docs/manual/mod/index.html.ko.euc-kr index e2b9e33f51b..82042481ccc 100644 --- a/docs/manual/mod/index.html.ko.euc-kr +++ b/docs/manual/mod/index.html.ko.euc-kr @@ -76,6 +76,7 @@ NT. providers based on actual providers
    mod_authn_anon
    ÀÎÁõ¿µ¿ª¿¡ "À͸í(anonymous)" »ç¿ëÀÚÀÇ Á¢±ÙÀ» Çã¿ëÇÑ´Ù
    +
    mod_authn_dbd
    User authentication using an SQL database
    mod_authn_dbm
    DBM ÆÄÀÏÀ» »ç¿ëÇÑ »ç¿ëÀÚ ÀÎÁõ
    mod_authn_default
    ÃÖÈÄ ÀÎÁõ¸ðµâ
    mod_authn_file
    ¹®ÀÚÆÄÀÏÀ» ÀÌ¿ëÇÑ »ç¿ëÀÚ ÀÎÁõ
    diff --git a/docs/manual/mod/mod_cache.html.en b/docs/manual/mod/mod_cache.html.en index c408f4b27a0..845c1d8c198 100644 --- a/docs/manual/mod/mod_cache.html.en +++ b/docs/manual/mod/mod_cache.html.en @@ -31,6 +31,12 @@ Source File:mod_cache.c

    Summary

    +
    This module should be used with care and + can be used to circumvent Allow and Deny directives. You + should not enable caching for any content to which you wish + to limit access by client host name, address or environment + variable.
    +

    mod_cache implements an RFC 2616 compliant HTTP content cache that can be used to cache either local or proxied content. mod_cache requires the services of one or more storage diff --git a/docs/manual/mod/mod_cache.xml.ja b/docs/manual/mod/mod_cache.xml.ja index 6c9908d4192..f61d2b68ea0 100644 --- a/docs/manual/mod/mod_cache.xml.ja +++ b/docs/manual/mod/mod_cache.xml.ja @@ -1,7 +1,7 @@ - + + + + + + +