wok diff apache/stuff/fix-range-CVE-2011-3192.conf @ rev 17956
Add hunspell
author | Pascal Bellard <pascal.bellard@slitaz.org> |
---|---|
date | Thu Apr 16 13:27:06 2015 +0200 (2015-04-16) |
parents | |
children |
line diff
1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/apache/stuff/fix-range-CVE-2011-3192.conf Thu Apr 16 13:27:06 2015 +0200 1.3 @@ -0,0 +1,8 @@ 1.4 +# From http://thread.gmane.org/gmane.comp.apache.announce/58 1.5 +# Drop the Range header when more than 5 ranges. 1.6 +# CVE-2011-3192 1.7 +SetEnvIf Range (,.*?){5,} bad-range=1 1.8 +RequestHeader unset Range env=bad-range 1.9 + 1.10 +# optional logging. 1.11 +#CustomLog logs/range-CVE-2011-3192.log common env=bad-range