brian 98/06/27 10:58:40
Modified: src CHANGES Log: All those who submit code towards a problem, not just the final integrator (despite any amount of rework) should be credited. Revision Changes Path 1.935 +2 -2 apache-1.3/src/CHANGES Index: CHANGES =================================================================== RCS file: /export/home/cvs/apache-1.3/src/CHANGES,v retrieving revision 1.934 retrieving revision 1.935 diff -u -r1.934 -r1.935 --- CHANGES 1998/06/27 17:24:06 1.934 +++ CHANGES 1998/06/27 17:58:38 1.935 @@ -5,7 +5,7 @@ *) Win32 (security): Eliminate trailing "."s in path components. These are ignored by the Windows filesystem, and so can be used to bypass security. - [Ben Laurie, Alexei Kosut]. + [Ben Laurie, Alexei Kosut, W G Stoddard]. *) We now attempt to dump core when we get SIGILL. [Jim Jagielski] @@ -23,7 +23,7 @@ *) Win32 (security): Eliminate directories consisting of three or more dots; these are treated by Win32 as if they are ".." but are not detected by other machinery within Apache. This is something of a kludge but - eliminates a security hole. [Ben Laurie] + eliminates a security hole. [W G Stoddard, Ben Laurie] *) Move ap_escape_quotes() from src/ap to src/main/util.c; it uses pools and thus pollutes libap (until the pool stuff is moved there).