Hi,

RewriteRule does tilde expansion even without mod_userdir being
loaded, and it does so without the usual public_html component being
added. This is a) not mod_rewrite's business and b) a practically
unknown feature. I'd like to see this feature removed.

There's also an issue with the substitution part of a rule being taken
as an absolute filesystem path if the first part of the rewriten path
corresponds to the name of a directory in root. This is useful but
again rarely known and potentially dangerous (with the caveat that /
should be protected by Deny). I'd like to see a flag added to
RewriteRule to make this behaviour explicit rather than implied.

Being a lowly docs-mule I'm not able to make these kinds of changes
myself; hopefully that doesn't make this message a heckle from the
peanut gallery.

Should I file a bug for this? It's a feature request rather than a bug
so I thought not.

-- 
noodl

Reply via email to