https://bz.apache.org/bugzilla/show_bug.cgi?id=62667

--- Comment #5 from Rainer Jung <rainer.j...@kippdata.de> ---
httpd mod_rewrite code seems to be recursive, but it contains the following a
little cryptic comment:

To make rewrite maps useful, the lookup key and
default values must be expanded, so we make
recursive calls to do the work. For security
reasons we must never expand a string that includes
verbatim data from the network. The recursion here
isn't a problem because the result of expansion is
only passed to lookup_map() so it cannot be
re-expanded, only re-looked-up. Another way of
looking at it is that the recursion is entirely
driven by the syntax of the nested curly brackets.

Regards,

Rainer

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to