https://bz.apache.org/bugzilla/show_bug.cgi?id=70099
Bug ID: 70099
Summary: AllowOverride Directive misleading about effect of
“AllowOverride Options=…”
Product: Apache httpd-2
Version: 2.5-HEAD
Hardware: All
URL: https://httpd.apache.org/docs/trunk/en/mod/core.html#a
llowoverride
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: Documentation
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
The Options case for AllowOverride is described as follows:
> Allow use of the directives controlling specific directory features (Options
> and XBitHack). To restrict which options may be overridden, specify an equal
> sign followed by a comma-separated list, without spaces, of options that may
> be set using the Options directive.
>
> Implicit disabling of Options
> Even though the list of options that may be used in .htaccess files can be
> limited with this directive, as long as any Options directive is allowed any
> other inherited option can be disabled by using the non-relative syntax. In
> other words, this mechanism cannot force a specific option to remain set
> while allowing any others to be set.
After reading, re-reading and re-re-reading the note for at least 5 minutes, I
believe I managed to make sense of it. But if I did, that means the base
description is quite misleading. Readers who read that “AllowOverride
Options=x,y” allows to restrict which options may be overridden will infer that
it prevents overriding options other than x and y. Yet my understanding of the
note is that if the parent directory has option y enabled, it can be disabled
with “Options x”.
The description should specify the effect of any possible value. As this
problem has existed for a long time (since 2.2), the note should be made a
warning.
I did not test and apologize in advance if I misunderstood the note. In that
case, I highly recommend to clarify the note. One thing I assume is that “any
Options directive” means “at least 1 Options directive”.
🅭🄍: https://www.philippecloutier.com/Common+infrastructure+licensing#its
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
