Re: Understanding OptionsBleed

On Thu, Sep 21, 2017 at 10:54 AM, Yann Ylavic wrote: > On Wed, Sep 20, 2017 at 6:36 PM, William A Rowe Jr > wrote: >> >> Provided AllowOverride is None, and AllowOverrideList does not include >> "

Re: Understanding OptionsBleed

On Wed, Sep 20, 2017 at 6:36 PM, William A Rowe Jr wrote: > > Provided AllowOverride is None, and AllowOverrideList does not include > " this theory;

Re: Understanding OptionsBleed

Hi Bill, nice summary, totally agreed. Thanks! On Wed, Sep 20, 2017 at 6:36 PM, William A Rowe Jr wrote: > So as most people have correctly identified, this defect has existed > for an incredibly long time. > > But how it is triggered and avoided would help us to

Understanding OptionsBleed

So as most people have correctly identified, this defect has existed for an incredibly long time. But how it is triggered and avoided would help us to correctly study unexpected behaviors. OPTIONS * - won't trigger the defect, .htaccess should not be examined. OPTIONS / - may trigger the