Re: Possible release note for systems running PHP through CGI.
On Tue, Aug 21, 2012 at 09:07:59AM +0200, Ondřej Surý wrote:
[...]
>> Maybe add just a small paragraph that the configuration of the
>> extensions has changed and php users should read the NEWS file?
>
> That's probably sensible approach. I have quickly drafted short
> paragraph which can be used for release notes:
>
> Default PHP extension configuration
> -----------------------------------
>
> The mime-types package has dropped non-standard definitions of
> PHP MIME-Types as a security measure. Default PHP configuration
> for libapache2-mod-php5{filter} and php5-cgi now only serve files
> which have .php, .php[345] and .phtml extensions on a most right
> place as opposed to previous state where <filename>.php.foobar
> would have been interpreted. Please read NEWS file in the PHP
> SAPI of your choice for further information.
I fail to parse that "on a most right place" bit though I'm not a native
speaker. If you meant that those extension specifications form a minimal
sane and safe subset, may be just go ahead and write exactly that. ;-)
Reply to: