Package: sitecopy
Version: 1:0.15.1-1
Severity: normal

When working in (at least) the --fetch mode, sitecopy issues a PROPFIND
request with Depth: Infinity (presumably to get a complete file list in one
request).  This results in a 403 Forbidden return from any attempt to issue
a sitecopy --fetch for a new site.

However, the WebDAV working group has stated that Depth: Infinity PROPFIND
requests shouldn't be issued by well-behaved client software, due to
resource consumption issues and the possibility of DoSing a web server.  As
a result, the default config of many DAV implementations (including Apache's
mod_dav) is to disallow such PROPFIND requests.

- Matt

Attachment: signature.asc
Description: Digital signature

Reply via email to