>Number:         2806
>Category:       general
>Synopsis:       Filenames containing the word .cgi.html anywhere are mistaken 
>for CGI's
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Fri Aug  7 06:30:00 PDT 1998
>Last-Modified:
>Originator:     [EMAIL PROTECTED]
>Organization:
apache
>Release:        Server version Apache/1.2.4.
>Environment:
su-2.01# uname -a
FreeBSD kaos.fastnet.co.uk 2.2.5-RELEASE FreeBSD 2.2.5-RELEASE #0: Sat May 16 
15:12:29 BST 1998     [EMAIL PROTECTED]:/usr/src/sys/compile/KAOS  i386
su-2.01# 
>Description:
If a file has the extension .cgi.html it is mistaken as a CGI and
not a HTML file.

Example:

If you have a a file called helpdesk.cgi.html and try to access it you
get a Forbidden error message, if you rename it to helpdesk.cgi.moo.html
it works fine, likewise if you rename it to helpdesk.commongi.html it
works fine.
>How-To-Repeat:
Create a file called helpdesk.cgi.html and try and look at it in a 
browser, then try renaming it to helpdesk.comongi.html and look at 
it again.
>Fix:
Appears to be a problem in the way your parsing the filename extensions
for the relevant handler.
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <[EMAIL PROTECTED]> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.                                      ]
[Reply only with text; DO NOT SEND ATTACHMENTS!         ]




Reply via email to