My opinion is to make it opt-in before the next 2.4, but I am not committed to that.
Before I do doc, any other thoughts? http://people.apache.org/~covener/patches/redirecturl-optin.diff This adds a directive to core.c called QualifyRedirectURL that must be set to ON to run the 2.4.17 code. ---------- Forwarded message ---------- From: <[email protected]> Date: Fri, Oct 23, 2015 at 12:55 PM Subject: [Bug 57785] REDIRECT_URL is not suitable for use in server-generated pages To: [email protected] https://bz.apache.org/bugzilla/show_bug.cgi?id=57785 --- Comment #7 from Jacob P <[email protected]> --- Here at cPanel we are reverting our 2.4.17 release and are going to re-release 2.4.16. Too many issues with mod_rewrite/REDIRECT_URL causing a *lot* of applications to stop working. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] -- Eric Covener [email protected]
