Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

copr: backend: nicer lighttpd doc

Browse source
This commit is contained in:
Pavel Raiskup 2021-02-02 19:36:14 +01:00
parent 8ba5a4889f
commit cad2c4dbd0
1 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

14
roles/copr/backend/templates/lighttpd/lighttpd.conf
View file

@ -311,14 +311,14 @@ server.max-keep-alive-idle = 2
# Warning: This is sooo ugly.
#
# We only ever want to enable PHP CGI for the index generator file
# 'dir-generator.phpj, nothing else - so people can not execute their own
# scripts. IOW, non-conditional 'cgi.assign' can not be used!
# 'dir-generator.php', nothing else - so we are sure our users can not execute
# their own scripts. Therefore non-conditional 'cgi.assign' config can not be
# used.
#
# To make 'index-file.names' work correctly, we have to set 'cg.assign'
# conditionally only on paths that both (a) end by slash (= directories) and
# (b) do not contain 'dir-generator' string. This guards against
# '/some/dir-generator.php/' hacks.
# But to make the 'index-file.names' work correctly, we still have to set
# 'cgi.assign' conditionally - the trick is to do this only on paths that both
# (a) end with slash (= directories) and (b) do not contain 'dir-generator'
# string (guard against '/some/dir-generator.php/' or alike hacks).
index-file.names = (
"/dir-generator.php"
)