On 12/6/06, Chris Darroch <[EMAIL PROTECTED]> wrote:
Hi --

   The short version of this email is, please, can people review
this patch for server/request.c and see if it breaks anything?
There are versions for trunk and 2.2.x.  Thanks in advance!

http://people.apache.org/~chrisd/patches/walk_cache/


   I recently finished setting up mod_dav behind mod_authn_dbd, and
while we were testing I noticed that certain WebDAV clients
(*ahem, DAVExplorer*) send PROPFIND requests that cause mod_dav to
recurse down through the contents of the requested directory,
generating sub-requests for each file or directory it encounters.
Presumably such clients send a large DAV depth header value; I didn't
really probe the exact request contents.

Heh.  I'll pass this along to the DAVExplorer folks.

BTW, I expect that this would break Subversion and mod_authz_svn.  It
is possible to have an authz setup such that I can read /foo, but not
/foo/bar - the *only* way to confirm that someone has access is via
the authz hooks (and why SVN has such a penalty for path authz).  Yet,
if this breaks that, then that's a no-no.  So, have you tested that
setup and confirmed that it still works?  -- justin

Reply via email to