Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 18 Jan 1999 19:38:49 +0000
From:      Stuart Henderson <stuart@eclipse.net.uk>
To:        Graeme Tait <graeme@echidna.com>
Cc:        Karl Pielorz <kpielorz@tdx.co.uk>, lists@gal.netlab.sk, freebsd-isp@FreeBSD.ORG
Subject:   Re: Need non-case sensitive fs
Message-ID:  <36A38DC9.BA711465@eclipse.net.uk>
References:  <001c01be42b5$f433c5a0$231da8c3@gericom-tps.tps.sk> <36A30646.B5C623EB@eclipse.net.uk> <36A31491.9875B056@tdx.co.uk> <36A3206C.BAC24C09@eclipse.net.uk> <36A33253.106C@echidna.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> If mod_speling additionally allows a single spelling 
> error while accommodating case variations, or even worse, 
> returns a list of close matches, it is a potential
> security risk (in that it helps give access to URL's 
> that otherwise would have to be guessed exactly).

true, so edit mod_speling.c and in the spdist() function do a 
little commenting out to leave yourself with only the bits that
return SP_MISCAPITALIZED and SP_VERYDIFFERENT :-)

Stuart

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?36A38DC9.BA711465>