diff options
| author | Stefan Fritsch <sf@apache.org> | 2011-07-13 19:11:21 +0000 |
|---|---|---|
| committer | Stefan Fritsch <sf@apache.org> | 2011-07-13 19:11:21 +0000 |
| commit | 1039437f77622968e2e0498672828a6d36d2093c (patch) | |
| tree | d3f4c36b21a29d3bb5701856b690b5f484f46976 | |
| parent | 32d9e326efc69b545cb2e8c5d021870bdd20b6df (diff) | |
| download | httpd-1039437f77622968e2e0498672828a6d36d2093c.tar.gz | |
Add some environment variables to the whitelist in suexec
PR: 51499
Submitted by: Graham Laverty <graham reg ca>, Stefan Fritsch
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1146244 13f79535-47bb-0310-9956-ffa450edef68
| -rw-r--r-- | CHANGES | 5 | ||||
| -rw-r--r-- | support/suexec.c | 5 |
2 files changed, 10 insertions, 0 deletions
@@ -2,6 +2,11 @@ Changes with Apache 2.3.14 + *) suexec: Add environment variables CONTEXT_DOCUMENT_ROOT, CONTEXT_PREFIX, + REDIRECT_ERROR_NOTES, REDIRECT_SCRIPT_FILENAME, REQUEST_SCHEME to the + whitelist in suexec. PR 51499. [Graham Laverty <graham reg ca>, + Stefan Fritsch] + *) mod_rewrite: Fix regexp RewriteCond with NoCase. [Stefan Fritsch] *) mod_log_debug: New module that allows to log custom messages at various diff --git a/support/suexec.c b/support/suexec.c index ae17a77fcc..5d78bcdb85 100644 --- a/support/suexec.c +++ b/support/suexec.c @@ -81,6 +81,8 @@ static const char *const safe_env_lst[] = "AUTH_TYPE=", "CONTENT_LENGTH=", "CONTENT_TYPE=", + "CONTEXT_DOCUMENT_ROOT=", + "CONTEXT_PREFIX=", "DATE_GMT=", "DATE_LOCAL=", "DOCUMENT_NAME=", @@ -99,13 +101,16 @@ static const char *const safe_env_lst[] = "REMOTE_IDENT=", "REMOTE_PORT=", "REMOTE_USER=", + "REDIRECT_ERROR_NOTES=", "REDIRECT_HANDLER=", "REDIRECT_QUERY_STRING=", "REDIRECT_REMOTE_USER=", + "REDIRECT_SCRIPT_FILENAME=", "REDIRECT_STATUS=", "REDIRECT_URL=", "REQUEST_METHOD=", "REQUEST_URI=", + "REQUEST_SCHEME=", "SCRIPT_FILENAME=", "SCRIPT_NAME=", "SCRIPT_URI=", |