DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23421>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23421 Remove AddDefaultCharset from httpd.conf as shipped ------- Additional Comments From [EMAIL PROTECTED] 2003-09-26 03:17 ------- I'm not enough of an expert in this area to make a decision about it, but the problem with simply removing this directive is that it creates problems with cross-site scripting. See: http://httpd.apache.org/info/css-security/ and links from that page. In fact, AddDefaultCharset was originally added to deal with these problems, so simply removing it without addressing the CSS issue would not be smart. (See also bug 13986 that states that apache shouldn't set a default content-type by default. This issue should probably be addressed along side that one.) --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
