Re: default conf and ScriptAlias

2021-10-09 Thread Eric Covener
> Then how do you propose those using it, as lets say in my example, set the > cgi directory for that vhost? They can keep using it, get the equivalent function from a default configuration and never be the wiser, or use/change to Alias + an explicit SetHandler and Options. Most default

Re: default conf and ScriptAlias

2021-10-09 Thread Noel Butler
On 10/10/2021 11:07, Eric Covener wrote: I'm talking about removing it from the default configuration file and marking it as deprecated. I don't see a negative impact to users with their own configuration (not changed) or users with our default configuration (since the alternative does the

Re: default conf and ScriptAlias

2021-10-09 Thread Eric Covener
On Sat, Oct 9, 2021 at 8:30 PM Noel Butler wrote: > On 10/10/2021 03:39, Eric Covener wrote: > > Relative to the recent CVEs, should we replace ScriptAlias in the > default conf with Alias + SetHandler cgi-script in the corresponding > Directory section? > > And

Re: default conf and ScriptAlias

2021-10-09 Thread Alex Hautequest
Es, should we replace ScriptAlias in the >> default conf with Alias + SetHandler cgi-script in the corresponding >> Directory section? >> >> And .. should ScriptAlias be deprecated/discouraged in some way if the >> expanded version is safer by avoiding the equivalent o

Re: default conf and ScriptAlias

2021-10-09 Thread Noel Butler
On 10/10/2021 03:39, Eric Covener wrote: Relative to the recent CVEs, should we replace ScriptAlias in the default conf with Alias + SetHandler cgi-script in the corresponding Directory section? And .. should ScriptAlias be deprecated/discouraged in some way if the expanded version is safer

default conf and ScriptAlias

2021-10-09 Thread Eric Covener
Relative to the recent CVEs, should we replace ScriptAlias in the default conf with Alias + SetHandler cgi-script in the corresponding Directory section? And .. should ScriptAlias be deprecated/discouraged in some way if the expanded version is safer by avoiding the equivalent of setting