| d9c90143c1c69546f0bda9a0bf5e814508dda411 433694 |
|
22-Aug-2006 |
slive |
Allow the typical non-DAV methods to be unrestricted
in our DAV examples (in particular, POST). Also
change <Location> to <Directory> in the docs. This
particular example was not a security problem because
<Location> was being used to *extend* access, rather than
to *restrict* access, but it is better to encourage
people to use <Directory> by default.
PR: 40030 |
| 6e49afdcb88db0a6d000bbb5d106e8e7c9cd67ce 99469 |
|
21-Apr-2003 |
slive |
Some serious updates to the top section of the mod_dav docs. Many of the ideas
are stolen from Greg's mod_dav site. Some specifics:
- Change recommendations about where to place the dav lockfile and be specific
about required permissions.
- Remote the HEAD from the <Limit> block, since it is implied by GET.
- Add a security section discussing file permissions, auth issues, denial of
service, etc.
- Add a "complex config" section discussing the dynamic content issue.
Review requested. Unfortunately, I can't check in the html because of
transformation problems in my setup. |