https://issues.apache.org/bugzilla/show_bug.cgi?id=50377

           Summary: <Files*> and <Location*> sections seem to completely
                    miss how multiple of each of them are merged
           Product: Apache httpd-2
           Version: 2.3-HEAD
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: major
          Priority: P2
         Component: Documentation
        AssignedTo: [email protected]
        ReportedBy: [email protected]


Hi.

Perhaps I haven't seen it or I'm just stupid but from the descriptions
there...:
http://httpd.apache.org/docs/2.2/sections.html#mergin
http://httpd.apache.org/docs/2.2/mod/core.html#files
http://httpd.apache.org/docs/2.2/mod/core.html#location
...I do absolutely not understand how multiple matching <Files> sections (or
<Location> sections or their regexp-counterparts are merged).

Is it:
1) the first one that matches?
2) the last ones?
3) all that match?
4) the most specific match? (not to ask how one should defined this)

Take the following (still very simply example)

<Files *.pdf>
Order Deny,Allow
SetOutputFilter INCLUDES
</Files>
<Files x.pdf>
Order Allow,Deny
SetOutputFilter DEFLATE
</Files>

What is the effective outcome now when accessing "x.pdf"?
1)Order Deny,Allow
SetOutputFilter INCLUDES

2)Order Allow,Deny
SetOutputFilter DEFLATE

3)Order Allow,Deny (<????)
SetOutputFilter INCLUDES;DEFLATE

4)Order Allow,Deny
SetOutputFilter DEFLATE



Or another IMHO even more confusing example:
<Location />
    Order allow,deny
    Deny from all
</Location>
<LocationMatch /server-status>
    SetHandler server-status
    Order allow,deny
    Allow from 127.0.0.1 ::1
</LocationMatch>

How are they merged? And why? (When accessing /server-status


And why does e.g.:
<Location />
    Allow from 127.0.0.1 ::1
</Location>
<LocationMatch /server-status>
    SetHandler server-status
    Order allow,deny
</LocationMatch>

Not lead to an allow, when accessin /server-status.



For <Directory>/Match all this is totally clear,... from the least specific to
the most specific dir.


Cheers,
Chris.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to