ports/130179: [PATCH] www/apache22: Enable passing HTTP 'Authorization' headers as compile time option

Philip M. Gollucci pgollucci at freebsd.org
Mon Jan 12 15:00:04 PST 2009


The following reply was made to PR ports/130179; it has been noted by GNATS.

From: "Philip M. Gollucci" <pgollucci at freebsd.org>
To: bug-followup at FreeBSD.org, wens at csie.org
Cc:  
Subject: Re: ports/130179: [PATCH] www/apache22: Enable passing HTTP 'Authorization'
 headers as compile time option
Date: Mon, 12 Jan 2009 17:55:29 -0500

 with HTTPD PMC hat:
    This is actually going to be removed and *possibly* replaced with a 
 run-time option.
 
 With that in mind, I don't think we should add this, as it actually is a 
 security concern.
 


More information about the freebsd-apache mailing list