Bug#199685: mod_autoindex: fooling autoindex.o with slashes
Package: apache
Version: 1.3.27
mod_autoindex shows files in a directory listing, which should be
excluded by IndexIgnore by adding an additional slash in the URL.
Here is an example:
http://www-user.tu-chemnitz.de/~fri/test/autoindex/
this is ok, the autoindex module hides the file "aa.dontshow"
Now we add a slash before directory "autoindex":
http://www-user.tu-chemnitz.de/~fri/test//autoindex/
this is _not_ ok, the autoindex module shows file "aa.dontshow"
In order to hide files with extension ".dontshow", .htaccess contains:
IndexIgnore *.dontshow
-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux daniel 2.4.20 #1 Son Jan 26 16:34:02 CET 2003 i586
Locale: LANG=de_DE, LC_CTYPE=de_DE
Reply to: