I'm very skeptical of including this change in an SRU, because there
have been XSS vulnerabilities before in apache2 as a result of
mod_autoindex charset handling.  UTF-8 is certainly the reasonable
default charset on Ubuntu,  but it has been well before 8.04 as well, so
I'm hesitant to have such a change made via SRU without some indication
of why this wasn't changed much earlier.

-- 
[SRU] mod_autoindex not configured for UTF-8
https://bugs.launchpad.net/bugs/193753
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to