youtube/README: use stricter location criterion in httpd.conf example - frontends - front-ends for some sites (experiment)
DIR Log
DIR Files
DIR Refs
DIR README
DIR LICENSE
---
DIR commit 5dbcb6f3c9ab9a48446054e954147b652fb26407
DIR parent e0eb56d566e98aa2c886de31b9df6c7e6636b00a
HTML Author: Anders Damsgaard <anders@adamsgaard.dk>
Date: Tue, 6 Oct 2020 17:07:39 +0200
youtube/README: use stricter location criterion in httpd.conf example
The "match" keyword enables shell globbing rules (httpd.conf(5)),
which results in undesirable behavior when serving a file unrelated
to the CGI that has a name beginning with <path>, which could for
example be "idiotbox.css". Note that the stricter rule still matches
correctly if the URL contains a query string.
Diffstat:
M youtube/README | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
---
DIR diff --git a/youtube/README b/youtube/README
@@ -55,7 +55,7 @@ Nginx + slowcgi example:
httpd + slowcgi example:
- location match "/idiotbox" {
+ location "/idiotbox" {
root "/cgi-bin/idiotbox.cgi"
fastcgi
}