https://issues.apache.org/bugzilla/show_bug.cgi?id=51482
--- Comment #1 from Eric Covener <[email protected]> 2011-07-06 15:01:52 UTC --- If you allow /etc/ to be served and configure it for directory listings, and you substitute /etc/ in a rewriterule, it will be served. In most configurations with normal <Directory /> restrictions, this is not a concern. RewriteRule says: file-system path Designates the location on the file-system of the resource to be delivered to the client. URL-path A DocumentRoot-relative path to the resource to be served. Note that mod_rewrite tries to guess whether you have specified a file-system path or a URL-path by checking to see if the first segment of the path exists at the root of the file-system. For example, if you specify a Substitution string of /www/file.html, then this will be treated as a URL-path unless a directory named www exists at the root or your file-system, in which case it will be treated as a file-system path. If you wish other URL-mapping directives (such as Alias) to be applied to the resulting URL-path, use the [PT] flag as described below. This is unlikely to be changed in 2.2, but there is has been dicussion in 2.4 to split RewriteRule into two directives so it's always only mapping URI->URI or URI->Filesystem. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
