On Thu, Mar 8, 2018 at 11:00 PM, <[email protected]> wrote: > > *) mod_access_compat, mod_authz_host: Prevent access control > misconfiguration > due to interpretation of #comments in Require host or Allow/Deny > directives. > trunk patch: http://svn.apache.org/r1667676 > http://svn.apache.org/r1826207 > 2.4.x patch: trunk works, svn merge -c 1667676,1826207 > ^/httpd/httpd/trunk . > - +1: jorton, jim, > + +1: jorton, jim, ylavic
This one possibly/later could be addressed at ap_getword_conf[_nocomment)() level, many/most directives should stop on #comments no?
