https://bz.apache.org/bugzilla/show_bug.cgi?id=58854
--- Comment #14 from Eric Covener <[email protected]> --- (In reply to Eric Covener from comment #13) > > Our initial testing advises that the fix for rewrites looping works, but the > > original issue persists, that the RewriteRule ignores any Requires. > > I'm fairly sure I originally tested that case, with the regressing patch, > but I can no longer get it to fail even with a vanilla 2.4.18. But I am now > questioning whether I really did. > > mod_rewrite specified in htaccess doesn't even run in the 'require all > denied' case. Must be missing something. Something that fuels my doubts is how I worded the fix, wrt looping only. Can anyone share trace8 output for this failure on 2418: Example of Apache 2.4.18 working incorrectly: 1. Create /home/cgihw/public_html/.htaccess: Require all denied RewriteEngine on RewriteRule .* goodbye.txt [L] 2. Remove file: rm -f /home/cgihw/public_html/403.shtml 3. Remove file: rm -f /home/cgihw/public_html/missing.txt 4. Create file: echo "goodbye world" > /home/cgihw/public_html/goodbye.txt 5. Navigate to http://cgihw.loc/missing.txt 6. Observe that you are incorrectly presented with the contents of goodbye.txt 7. Observe that the LimitInternalRecursion limit is never compared against 8. Observe that no Internal server error is presented to the user -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
