coar        98/06/23 16:41:13

  Modified:    src      CHANGES
  Log:
        Bill's fix for non-executable script files on Win32.
  
  Submitted by: W G Stoddard <[EMAIL PROTECTED]>
  
  Revision  Changes    Path
  1.930     +5 -2      apache-1.3/src/CHANGES
  
  Index: CHANGES
  ===================================================================
  RCS file: /export/home/cvs/apache-1.3/src/CHANGES,v
  retrieving revision 1.929
  retrieving revision 1.930
  diff -u -r1.929 -r1.930
  --- CHANGES   1998/06/23 19:53:29     1.929
  +++ CHANGES   1998/06/23 23:41:11     1.930
  @@ -1,9 +1,12 @@
   Changes with Apache 1.3.1
   
  +  *) Win32: If we can't figure out how to execute a file in a script
  +     directory, bail out of the request with an error message.  [W G 
Stoddard]
  +
     *) Win32 (security): Eliminate directories consisting of three or more 
dots;
        these are treated by Win32 as if they are ".." but are not detected by
  -      other machinery within Apache. This is something of a kludge but 
eliminates
  -      a security hole. [Ben Laurie]
  +     other machinery within Apache. This is something of a kludge but
  +     eliminates a security hole. [Ben Laurie]
   
     *) Move ap_escape_quotes() from src/ap to src/main/util.c; it uses
        pools and thus pollutes libap (until the pool stuff is moved there).
  
  
  

Reply via email to