> For users of mod_dav, though, this means that a working 2.2.x
> configuration will still break after an upgrade to 2.4.8; they'd
> need to add in "DirectoryCheckHandler On".
For the rewrite PR's, which are relatively old, I just wanted to get a
safe non-default change into 2.4.x.
I subsequently [next revision] decided it was safe enough to whitelist
mod_rewrites redirect-handler, and to do it by default. One of the
good reasons for this is that since it's trying to do an internal
redirect, mod_dir will get a second chance at it in the new request.
>
> I'd like to my additional line of logic, if you agree:
>
> + if (r->method_number != M_GET && r->method_number != M_POST) {
> + return DECLINED;
> + }
>
> which would ensure that for mod_dir takes no effect when the method
> is neither GET nor POST, which seems reasonable to me (since it has
> no real meaning with other methods), and has the effect that 2.2.x DAV
> setups will "just work" again with 2.4.x, once the patch is back-ported.
>
> Does that seem acceptable to you? I can just follow CTR, I know, but
> I thought I'd ask first since you're clearly looking at similar issues
> at the same time.
I don't really know enough about the risk on this one.