[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#199685: mod_autoindex: fooling autoindex.o with slashes



Package: apache
Version: 1.3.27

mod_autoindex shows files in a directory listing, which should be
excluded by IndexIgnore by adding an additional slash in the URL.

Here is an example:

http://www-user.tu-chemnitz.de/~fri/test/autoindex/
this is ok, the autoindex module hides the file "aa.dontshow"

Now we add a slash before directory "autoindex":
http://www-user.tu-chemnitz.de/~fri/test//autoindex/
this is _not_ ok, the autoindex module shows file "aa.dontshow"

In order to hide files with extension ".dontshow", .htaccess contains:
IndexIgnore *.dontshow

-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux daniel 2.4.20 #1 Son Jan 26 16:34:02 CET 2003 i586
Locale: LANG=de_DE, LC_CTYPE=de_DE




Reply to: