[users@httpd] When %26 and %20 are in the same URL, mod_proxy with SSL unescapes encoded chars when it shouldn't

2012-07-17 Thread Nicholas DiPiazza
Dear apache group: I have a strange issue. Rhel 5 Apache 2.2.21 (Unix) httpd.conf http://pastebin.com/EpkZtUCM httpd-ssl.conf http://pastebin.com/vUk0yV4F I am proxying to a backend tomcat server, the SSL terminates at apache. When downloading a file from Tomcat through the SSL proxy, if the UR

[users@httpd] Re: Has bug 52965 : "proxy: prefetch request body failed" been fixed?

2012-07-17 Thread nj00yy_2
Is there a work around for this bug? -- View this message in context: http://apache-http-server.18135.n6.nabble.com/Has-bug-52965-proxy-prefetch-request-body-failed-been-fixed-tp4998782p4998792.html Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.

RE: [users@httpd] Denying access to a folder while allowing the content inside it to be displayed on other pages?

2012-07-17 Thread Ryan Bowman
I guess I would like to deny access to the index. But I also don't want people to be able to view my global.css file, which every page is linked to and is in the directory "/css". Also I just set up the server with the default settings. Are there any basic security precautions I should be taking at

Re: [users@httpd] mod-cgi reads entire output into memory...

2012-07-17 Thread Nick Kew
On Tue, 17 Jul 2012 23:25:09 +0300 Nadav Har'El wrote: > The resulting code is ugly, hairy and Unix-only, but it works and > performance is significantly better than normal mod_cgi for my usecase > of very large program-generated files. For example, a simple CGI > generating 512 MB of data took 0

Re: [users@httpd] mod-cgi reads entire output into memory...

2012-07-17 Thread Nadav Har'El
On Tue, Jul 17, 2012, Nadav Har'El wrote about "Re: [users@httpd] mod-cgi reads entire output into memory...": > I "almost" have such code, but ran into a mystery - where in the > request_req can I find the client socket, so I can write to it directly? > There are so many layers of output filters,

Re: [users@httpd] Denying access to a folder while allowing the content inside it to be displayed on other pages?

2012-07-17 Thread Macks, Aaron
By "Direct Access" do you mean the index of the directory? A -- Aaron Macks Sr. Unix Systems Engineer Harvard Business Publishing 300 North Beacon St.| Watertown, MA 02472 (617) 783-7461| Fax: (617) 783-7467 www.harvardbusiness.org | Cell:(978) 317-3614 On Jul 17, 201

[users@httpd] Denying access to a folder while allowing the content inside it to be displayed on other pages?

2012-07-17 Thread Ryan Bowman
I've been looking for 2 hours and I still can't find anything about this. In my site's root directory I have an "images" folder, which contains all the images used in my site. I would like to be able to deny direct url access to the folder but still allow the images to be displayed on the site.