From: Guenter Knauf <fuankg@apache.org>
Date: Thu, 20 Sep 2012 14:51:51 +0000 (+0000)
Subject: Make printenv.vbs inactive by default.
X-Git-Tag: 2.5.0-alpha~6294
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d583615a11f0bed91b2a9d300cbf212d3999ebe3;p=thirdparty%2Fapache%2Fhttpd.git

Make printenv.vbs inactive by default.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1388054 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/docs/cgi-examples/printenv.vbs b/docs/cgi-examples/printenv.vbs
index b7e480d45e7..2b37b47e79b 100644
--- a/docs/cgi-examples/printenv.vbs
+++ b/docs/cgi-examples/printenv.vbs
@@ -1,7 +1,15 @@
-'!c:/windows/system32/cscript -nologo
-'#
-'#  printenv -- demo CGI program which just prints its environment
-'#
+'
+
+' To permit this cgi, replace ' on the first line above with the
+' appropriate shebang, f.e. '!c:/windows/system32/cscript -nologo
+'
+' Note that it is subject to cross site scripting attacks on MS IE
+' and any other browser which fails to honor RFC2616, so never use
+' it in a live server environment, it is provided only for testing.
+
+''
+''  printenv -- demo CGI program which just prints its environment
+''
 Option Explicit
 
 Dim objShell, objArray, str, env