I'm very skeptical of including this change in an SRU, because there
have been XSS vulnerabilities before in apache2 as a result of
mod_autoindex charset handling.  UTF-8 is certainly the reasonable
default charset on Ubuntu,  but it has been well before 8.04 as well, so
I'm hesitant to have such a change made via SRU without some indication
of why this wasn't changed much earlier.

-- 
[SRU] mod_autoindex not configured for UTF-8
https://bugs.launchpad.net/bugs/193753
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to