From c9ddc2c74812bbc4a0f6103c09b784b711e5efc9 Mon Sep 17 00:00:00 2001
From: Daniel Baumann
L
flag can be useful in this context to end the
current round of mod_rewrite processing.
-
+Setting this flag is required to allow a rewrite to continue If the + HTTP request being written has an encoded question mark, '%3f', and the + rewritten result has a '?' in the substiution. This protects from a malicious + URL taking advantage of a capture and re-substitution of the encoded + question mark.
+Setting this flag is required in server-scoped substitutions + start with a variable or backreference and resolve to a filesystem path. + These substitutions are not prefixed with the document root. + This protects from a malicious URL causing the expanded substitution to + map to an unexpected filesystem location.
Available Languages: en | diff --git a/docs/manual/rewrite/flags.html.fr.utf8 b/docs/manual/rewrite/flags.html.fr.utf8 index 073e46d..1e07037 100644 --- a/docs/manual/rewrite/flags.html.fr.utf8 +++ b/docs/manual/rewrite/flags.html.fr.utf8 @@ -26,6 +26,8 @@
Ce document décrit les drapeaux disponibles dans la directive
RewriteRule
, en fournissant
--
cgit v1.2.3