https://bz.apache.org/bugzilla/show_bug.cgi?id=63184
Bug ID: 63184
Summary: SSI documentation is incomplete
Product: Tomcat 9
Version: 9.0.16
Hardware: Macintosh
Status: NEW
Severity: enhancement
Priority: P2
Component: Documentation
Assignee: dev@tomcat.apache.org
Reporter: resea...@nightwatchcybersecurity.com
Target Milestone: -----
Re:
https://tomcat.apache.org/tomcat-9.0-doc/ssi-howto.html
The SSI documentation can be improved in several ways:
- It doesn't mention that SSI variables (set/echo) are actually request
attributes and thus are not scope of SSI only. That means SSI pages can see
attributes set by other components, and can set request attributes to pass to
other components
- The "config" directive takes three parameters but they are not mentioned -
"errmsg", "sizefmt" and "timefmt"
- The "echo" directive has an encoding parameter that appears in code but is
not mentioned in the documentation. It can be "url", "entity" or "none";
defaulting to "entity"
- The "exec" directive take a "cmd" or "cgi" parameters - the "cgi" parameter,
when used is the same as include
- The "include", "flastmod" and "fsize" directives can take either "file" or
"virtual" parameters but they are not both documented
- SSI variables cannot start with "java.", "javax." or "sun." but this is not
mentioned
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
