From: msweet <msweet@a1ca3aef-8c08-0410-bb20-df032aa958be>
Date: Tue, 30 Sep 2014 16:23:21 +0000 (+0000)
Subject: Clarify that scripts must be read-only and owned by root.
X-Git-Tag: v2.2b1~477
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e49523c5084d688ddc762d60f9caf705c41fbc8c;p=thirdparty%2Fcups.git

Clarify that scripts must be read-only and owned by root.

Also list CONTENT_TYPE variable.


git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12172 a1ca3aef-8c08-0410-bb20-df032aa958be
---

diff --git a/doc/help/cgi.html b/doc/help/cgi.html
index c50a2a5014..34c6debb35 100644
--- a/doc/help/cgi.html
+++ b/doc/help/cgi.html
@@ -63,8 +63,7 @@ application/x-httpd-php php
 application/x-httpd-python py
 </PRE>
 
-<P>CGI scripts/programs (application/x-httpd-cgi) also must have execution
-permissions to be treated as a CGI script or program.</P>
+<P>CGI scripts/programs (application/x-httpd-cgi) also must be owned by root, have execution permissions, and not have world or group write permissions to be treated as a CGI script or program.</P>
 
 <H2><A NAME="LIMITS">Limitations</A></H2>
 
@@ -75,10 +74,7 @@ following exceptions:</P>
 
 	<LI>No PATH_INFO or PATH_TRANSLATED support</LI>
 
-	<LI>Limited HTTP field support; only the Content-Length
-	(CONTENT_LENGTH), Cookie (HTTP_COOKIE), and User-Agent
-	(HTTP_USER_AGENT) fields are placed in environment
-	variables at this time</LI>
+	<LI>Limited HTTP field support; only the Content-Length (CONTENT_LENGTH), Content-Type (CONTENT_TYPE), Cookie (HTTP_COOKIE), Referrer (HTTP_REFERRER), and User-Agent (HTTP_USER_AGENT) fields are placed in environment variables at this time</LI>
 
 </UL>