https://bz.apache.org/bugzilla/show_bug.cgi?id=60009
Bug ID: 60009
Summary: A local path reduced from an absolute URL that matched
a virtual host is not prefixed with the DocumentRoot
Product: Apache httpd-2
Version: 2.5-HEAD
Hardware: PC
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: mod_rewrite
Assignee: [email protected]
Reporter: [email protected]
The problem is that if a substitution is an absolute URL that matched the
current virtual host, the URL can be reduced to a local path.
For example, it is possible to access files from the /tmp directory with the
following configuration:
<VirtualHost localhost:80>
...
RewriteRule /file/(.*) http://localhost/tmp/$1
</VirtualHost>
To resolve this issue, the DocumentRoot can be prefixed to a local path if is
has been reduced from an absolute URL.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
