From 6680ceb5e711142bd1ee61f25827babaf25938ca Mon Sep 17 00:00:00 2001
From: Christophe Jaillet $N
in the substitution string!
UnsafePrefixStat
Allows potentially unsafe substitutions from a leading variable or backreference to a filesystem path.
- details ...
+ details ...
+
diff --git a/docs/manual/rewrite/flags.xml b/docs/manual/rewrite/flags.xml
index 0b9ccfa9a8..d46ba08818 100644
--- a/docs/manual/rewrite/flags.xml
+++ b/docs/manual/rewrite/flags.xml
@@ -865,11 +865,15 @@ The UNC
Prevents the merging of multiple leading slashes, as used by Windows UNC paths.
- details ...
+ details ...
+ L
flag can be useful in this context to end the
These substitutions are not prefixed with the document root.
This protects from a malicious URL causing the expanded substitution to
map to an unexpected filesystem location.
Setting this flag prevents the merging of multiple leading slashes, as used in Windows UNC paths. The flag is not necessary when the rules - substitution starts with multiple literal slashes.
+ substitution starts with multiple literal slashes. + +