From c9ddc2c74812bbc4a0f6103c09b784b711e5efc9 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Mon, 1 Jul 2024 19:06:34 +0200 Subject: Adding upstream version 2.4.60. Signed-off-by: Daniel Baumann --- docs/manual/rewrite/flags.html.en | 19 ++++++++++++++++++- docs/manual/rewrite/flags.html.fr.utf8 | 2 ++ 2 files changed, 20 insertions(+), 1 deletion(-) (limited to 'docs/manual/rewrite') diff --git a/docs/manual/rewrite/flags.html.en b/docs/manual/rewrite/flags.html.en index bfb5656..604e278 100644 --- a/docs/manual/rewrite/flags.html.en +++ b/docs/manual/rewrite/flags.html.en @@ -57,6 +57,8 @@ providing detailed explanations and examples.

  • R|redirect
  • S|skip
  • T|type
  • +
  • UnsafeAllow3F
  • +
  • UnsafePrefixStat
  • See also

    top
    @@ -820,7 +822,22 @@ otherwise the MIME-type set with this flag is lost due to an internal re-processing (including subsequent rounds of mod_rewrite processing). The L flag can be useful in this context to end the current round of mod_rewrite processing.

    - +
    top
    +
    +

    UnsafeAllow3F

    +

    Setting this flag is required to allow a rewrite to continue If the + HTTP request being written has an encoded question mark, '%3f', and the + rewritten result has a '?' in the substiution. This protects from a malicious + URL taking advantage of a capture and re-substitution of the encoded + question mark.

    +
    top
    +
    +

    UnsafePrefixStat

    +

    Setting this flag is required in server-scoped substitutions + start with a variable or backreference and resolve to a filesystem path. + These substitutions are not prefixed with the document root. + This protects from a malicious URL causing the expanded substitution to + map to an unexpected filesystem location.

    Available Languages:  en  | diff --git a/docs/manual/rewrite/flags.html.fr.utf8 b/docs/manual/rewrite/flags.html.fr.utf8 index 073e46d..1e07037 100644 --- a/docs/manual/rewrite/flags.html.fr.utf8 +++ b/docs/manual/rewrite/flags.html.fr.utf8 @@ -26,6 +26,8 @@

    Langues Disponibles:  en  |  fr 

    +
    Cette traduction peut être périmée. Vérifiez la version + anglaise pour les changements récents.

    Ce document décrit les drapeaux disponibles dans la directive RewriteRule, en fournissant -- cgit v1.2.3