mod_allowhandlers.xml revision b4ddd0004bc04c857001f9f5e4600f3957054a32
d24d4c5159bcb11c25bb294926cfe7105c789ea9slive<!DOCTYPE modulesynopsis SYSTEM "/style/modulesynopsis.dtd">
e942c741056732f50da2074b36fe59805d370650slive<?xml-stylesheet type="text/xsl" href="/style/manual.en.xsl"?>
88f76f668542dcd72fc9d71577997967c6bf123bslive<!-- $LastChangedRevision$ -->
88f76f668542dcd72fc9d71577997967c6bf123bslive Licensed to the Apache Software Foundation (ASF) under one or more
88f76f668542dcd72fc9d71577997967c6bf123bslive contributor license agreements. See the NOTICE file distributed with
88f76f668542dcd72fc9d71577997967c6bf123bslive this work for additional information regarding copyright ownership.
88f76f668542dcd72fc9d71577997967c6bf123bslive The ASF licenses this file to You under the Apache License, Version 2.0
88f76f668542dcd72fc9d71577997967c6bf123bslive (the "License"); you may not use this file except in compliance with
88f76f668542dcd72fc9d71577997967c6bf123bslive the License. You may obtain a copy of the License at
88f76f668542dcd72fc9d71577997967c6bf123bslive Unless required by applicable law or agreed to in writing, software
88f76f668542dcd72fc9d71577997967c6bf123bslive distributed under the License is distributed on an "AS IS" BASIS,
88f76f668542dcd72fc9d71577997967c6bf123bslive WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
88f76f668542dcd72fc9d71577997967c6bf123bslive See the License for the specific language governing permissions and
88f76f668542dcd72fc9d71577997967c6bf123bslive limitations under the License.
88f76f668542dcd72fc9d71577997967c6bf123bslive<description>Easily restrict what HTTP handlers can be used on the server</description>
38677582e6ddf26e810728a68cbe560345486e48slive<p>This module makes it easy to restrict which handlers may be used for a
38677582e6ddf26e810728a68cbe560345486e48sliverequest. A possible configuration would be:</p>
88f76f668542dcd72fc9d71577997967c6bf123bslive<Location />
88f76f668542dcd72fc9d71577997967c6bf123bslive AllowHandlers not server-info server-status balancer-manager ldap-status
88f76f668542dcd72fc9d71577997967c6bf123bslive</Location>
88f76f668542dcd72fc9d71577997967c6bf123bslive</highlight>
88f76f668542dcd72fc9d71577997967c6bf123bslive<p>It also registers a handler named <code>forbidden</code> that simply
88f76f668542dcd72fc9d71577997967c6bf123bslivereturns 403 FORBIDDEN to the client. This can be used with directives like
88f76f668542dcd72fc9d71577997967c6bf123bslive<directive module="mod_mime">AddHandler</directive>.</p>
88f76f668542dcd72fc9d71577997967c6bf123bslive<seealso><directive module="core">SetHandler</directive></seealso>
88f76f668542dcd72fc9d71577997967c6bf123bslive<seealso><directive module="mime">AddHandler</directive></seealso>
88f76f668542dcd72fc9d71577997967c6bf123bslive<directivesynopsis>
88f76f668542dcd72fc9d71577997967c6bf123bslive<description>Restrict access to the listed handlers</description>
88f76f668542dcd72fc9d71577997967c6bf123bslive<contextlist><context>directory</context></contextlist>
88f76f668542dcd72fc9d71577997967c6bf123bslive<p>The handler names are case sensitive. The special name
88f76f668542dcd72fc9d71577997967c6bf123bslive<code>none</code> can be used to match the case where no handler has been
88f76f668542dcd72fc9d71577997967c6bf123bsliveset. The special vallue <code>all</code> can be used to allow all
88f76f668542dcd72fc9d71577997967c6bf123bslivehandlers again in a later config section, even if some headers were denied
0dd298aa254f43fc223b1cc41e79d4a1fec308bcndearlier in the configuration merge order:</p>
88f76f668542dcd72fc9d71577997967c6bf123bslive<Location /server-status>
0dd298aa254f43fc223b1cc41e79d4a1fec308bcnd AllowHandlers all
88f76f668542dcd72fc9d71577997967c6bf123bslive SetHandler server-status
88f76f668542dcd72fc9d71577997967c6bf123bslive</Location>
88f76f668542dcd72fc9d71577997967c6bf123bslive</highlight>
88f76f668542dcd72fc9d71577997967c6bf123bslive</directivesynopsis>
88f76f668542dcd72fc9d71577997967c6bf123bslive</modulesynopsis>