Changes between Initial Version and Version 1 of Ticket #333


Ignore:
Timestamp:
2021-05-11T17:01:05-03:00 (4 years ago)
Author:
Jeff McKenna
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #333 – Description

    initial v1  
    11- since !MapServer 7.6.3, !MapServer prevents MAP= directory traversing, and sets a hardcoded MS_MAP_BAD_PATTERN
    2 - for the next MS4W release, Apache's httpd.conf must also contain a new default bad pattern, that specifically works with MS4W:
     2- for the next MS4W release, Apache's httpd.conf must also contain a new default bad pattern, that specifically works with MS4W (and its PCRE regex library) :
    33{{{
    44  SetEnv MS_MAP_BAD_PATTERN "[\/\\\\]{2}|[\/\\\\]?\.{2,}[\/\\\\]|,"