On 19/07/12 10:32, Jonas Smedegaard wrote:

A user may - directly or via a dependent package - rely on the
minified version being a file, even if *other* files in this package
is usable only when webserver has relaxed its security to follow
symlinks.


But:

$ cat /etc/javascript-common/javascript-common.conf
Alias /javascript /usr/share/javascript/

<Directory "/usr/share/javascript/">
        Options FollowSymLinks MultiViews
</Directory>

So it might be the case if you deliberately don't use that. I wouldn't
consider that an issue.

Regards,

--
Mehdi


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to