diff options
| author | Nick Kew <niq@apache.org> | 2017-09-18 23:20:51 +0200 |
|---|---|---|
| committer | Nick Kew <niq@apache.org> | 2017-09-18 23:20:51 +0200 |
| commit | 463791458886012702cf94ca4164376434259932 (patch) | |
| tree | 9469d62b1de7b0d65e36efd6b0f20c3f9530c851 | |
| parent | mod_rewrite/core: avoid the 'Vary: Host' header (diff) | |
| download | apache2-463791458886012702cf94ca4164376434259932.tar.xz apache2-463791458886012702cf94ca4164376434259932.zip | |
mod_speling/PR 38923: don't embed Referer in link in error page.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808780 13f79535-47bb-0310-9956-ffa450edef68
| -rw-r--r-- | CHANGES | 3 | ||||
| -rw-r--r-- | modules/mappers/mod_speling.c | 8 |
2 files changed, 7 insertions, 4 deletions
@@ -1,6 +1,9 @@ -*- coding: utf-8 -*- Changes with Apache 2.5.0 + *) mod_speling: Don't embed referer data in a link in error page. + PR 38923 [Nick Kew] + *) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST is used in a condition that evaluates to true. PR 58231 [Luca Toscano] diff --git a/modules/mappers/mod_speling.c b/modules/mappers/mod_speling.c index d0ac5b2b98..b0f4b8fe0e 100644 --- a/modules/mappers/mod_speling.c +++ b/modules/mappers/mod_speling.c @@ -482,10 +482,10 @@ static int check_speling(request_rec *r) if (ref != NULL) { *(const char **)apr_array_push(t) = "Please consider informing the owner of the " - "<a href=\""; - *(const char **)apr_array_push(t) = ap_escape_uri(sub_pool, ref); - *(const char **)apr_array_push(t) = "\">referring page</a> " - "about the broken link.\n"; + "referring page <tt>"; + *(const char **)apr_array_push(t) = ap_escape_html(sub_pool, ref); + *(const char **)apr_array_push(t) = + "</tt> about the broken link.\n"; } |