https://bz.apache.org/bugzilla/show_bug.cgi?id=62667
--- Comment #5 from Rainer Jung <rainer.j...@kippdata.de> --- httpd mod_rewrite code seems to be recursive, but it contains the following a little cryptic comment: To make rewrite maps useful, the lookup key and default values must be expanded, so we make recursive calls to do the work. For security reasons we must never expand a string that includes verbatim data from the network. The recursion here isn't a problem because the result of expansion is only passed to lookup_map() so it cannot be re-expanded, only re-looked-up. Another way of looking at it is that the recursion is entirely driven by the syntax of the nested curly brackets. Regards, Rainer -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org