https://bz.apache.org/bugzilla/show_bug.cgi?id=70015
Bug ID: 70015
Summary: RewriteRule Directive: Per-directory Rewrites
unclear/wrong about FollowSymLinks
Product: Apache httpd-2
Version: 2.5-HEAD
Hardware: All
URL: https://httpd.apache.org/docs/trunk/en/mod/mod_rewrite
.html#rewriterule
OS: All
Status: NEW
Severity: minor
Priority: P3
Component: Documentation
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
According to the documentation of the RewriteRule directive:
> To enable the rewrite engine in this context, you need to set "RewriteEngine
> On" and "Options FollowSymLinks" must be enabled. If your administrator has
> disabled override of FollowSymLinks for a user's directory, then you cannot
> use the rewrite engine. This restriction is required for security reasons.
This bullet should be reviewed on a few levels:
1. "Options FollowSymLinks" is the default. ‘"Options FollowSymLinks" must be
enabled’ should read ‘the FollowSymLinks option must be enabled’, ideally with
a link.
2. The SymLinksIfOwnerMatch option can also suffice.
3. It is not entirely clear what the second sentence tries to say, but it
should certainly be rewritten.
4. The last sentence would be more accurate as ‘This restriction was
implemented for security reasons.’ Ticket #70014 discusses getting rid of that
restriction, at least partially.
🅭🄍: https://www.philippecloutier.com/Common+infrastructure+licensing#its
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
