Doesn't our crazy old unquoted ErrorDocument directive have this issue too?
On Mar 8, 2018 16:05, "Yann Ylavic" <ylavic....@gmail.com> wrote: > On Thu, Mar 8, 2018 at 11:00 PM, <yla...@apache.org> wrote: > > > > *) mod_access_compat, mod_authz_host: Prevent access control > misconfiguration > > due to interpretation of #comments in Require host or Allow/Deny > directives. > > trunk patch: http://svn.apache.org/r1667676 > > http://svn.apache.org/r1826207 > > 2.4.x patch: trunk works, svn merge -c 1667676,1826207 > ^/httpd/httpd/trunk . > > - +1: jorton, jim, > > + +1: jorton, jim, ylavic > > This one possibly/later could be addressed at > ap_getword_conf[_nocomment)() level, many/most directives should stop > on #comments no? >
