What would folks think about changing
if (ap_strchr_c(arg, '*') != NULL) {
/* Prevent DOS attacks, only allow one segment to have a wildcard */
int found = 0; /* The number of segments with a wildcard */to permit multiple wildcards, but to restrict the number of matches returned (configurable with a directive, of course)? Over a small pattern space, uploads/*/* is often very useful. What would be the sane default? 1,000 entries?
