On Mon, 19 Feb 2001, Martin Kraemer wrote:
> On Sun, Feb 18, 2001 at 02:58:51PM -0500, Jim Jagielski wrote:
> > Martin Kraemer wrote:
> > > Something like
> > > <Location /*//*>
> > > Deny from all
> > >
> > > <Location /*/./*>
> > > Deny from all
>
> Alas, that does not work. Hmmm. Probably the name is canonicalized somewhere.
>
<Location> collapses multiple slashes into one to avoid some obvious
security issues. You could try using <LocationMatch> which shouldn't have
this issue, or you could try something like this: (untested)
SetEnvIf Request_URI "//" badrequest
Deny from env=badrequest
Joshua.
