[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#257775: AddDefaultCharset default setting is misleading



Coin,

> Since setting AddDefaultCharset off can imply security problem we will
> never switch it to off. For more information please check the previous URL
> and the apache documentation on httpd.apache.org

I'm OK with all this.
May i suggest you add a small note in 'README.Debian' with links (especially
http://httpd.apache.org/info/css-security/encoding_examples.html) so as
people to understand and not reopen a bug when the old ones are archived ?

Thx for this explanation.

BTW, thanks a lot for your work on IPv6 enabled apache.

-- 
Marc Dequènes (Duck)

Attachment: pgpOVykw5Wowp.pgp
Description: PGP signature


Reply to: