On 19/07/12 10:32, Jonas Smedegaard wrote:


A user may - directly or via a dependent package - rely on the
minified version being a file, even if *other* files in this package
is usable only when webserver has relaxed its security to follow
symlinks.


But:

$ cat /etc/javascript-common/javascript-common.conf
Alias /javascript /usr/share/javascript/

<Directory "/usr/share/javascript/">
        Options FollowSymLinks MultiViews
</Directory>

So it might be the case if you deliberately don't use that. I wouldn't
consider that an issue.

Regards,

--
Mehdi

_______________________________________________
Pkg-javascript-devel mailing list
Pkg-javascript-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel

Reply via email to