From 097f0aa906fec90c2fd669d1fe94c1342209fdb0 Mon Sep 17 00:00:00 2001 From: André Malo Date: Mon, 27 Jan 2014 08:11:57 +0000 Subject: update transformation git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1561601 13f79535-47bb-0310-9956-ffa450edef68 --- docs/manual/env.html.en | 4 ++-- docs/manual/misc/perf-scaling.html.en | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/manual/env.html.en b/docs/manual/env.html.en index 787df2dccd..dfcfc16495 100644 --- a/docs/manual/env.html.en +++ b/docs/manual/env.html.en @@ -406,7 +406,7 @@

Starting with version 2.4, Apache is more strict about how HTTP - headers are converted to environment variables in mod_cgi + headers are converted to environment variables in mod_cgi and other modules: Previously any invalid characters in header names were simply translated to underscores. This allowed for some potential cross-site-scripting attacks via header injection @@ -414,7 +414,7 @@ Unusual Web Bugs, slide 19/20).

If you have to support a client which sends broken headers and - which can't be fixed, a simple workaround involving mod_setenvif + which can't be fixed, a simple workaround involving mod_setenvif and mod_headers allows you to still accept these headers:

diff --git a/docs/manual/misc/perf-scaling.html.en b/docs/manual/misc/perf-scaling.html.en index a46f0bcad9..cf8b599748 100644 --- a/docs/manual/misc/perf-scaling.html.en +++ b/docs/manual/misc/perf-scaling.html.en @@ -1292,7 +1292,7 @@ Swap: 3903784 12540 3891244 code, but is not compiled by default. It can be built with the server by passing the option --enable-rewrite[=shared] to the configure command. Many binary distributions of - Apache come with mod_rewrite included. The following is an + Apache come with mod_rewrite included. The following is an example of an Apache virtual host that takes advantage of pre-rendered blog pages:

-- cgit v1.2.3