Added a warning that these scripts leak information.

(Backport r1423166)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1423169 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/docs/cgi-examples/printenv b/docs/cgi-examples/printenv
index fca6f8a435bb29fb2e7d03a5f9b4c2dd7883489a..5b5035e268eaf0827ace308abb9fa2e8d923d979 100644 (file)
--- a/docs/cgi-examples/printenv
+++ b/docs/cgi-examples/printenv
@@ -4,9 +4,12 @@
 # appropriate #!/path/to/perl shebang, and on Unix / Linux also
 # set this script executable with chmod 755.
 #
-# Note that it is subject to cross site scripting attacks on MS IE
-# and any other browser which fails to honor RFC2616, so never use
-# it in a live server environment, it is provided only for testing.
+# ***** !!! WARNING !!! *****
+# This script echoes the server environment variables and therefore
+# leaks information - so NEVER use it in a live server environment!
+# It is provided only for testing purpose.
+# Also note that it is subject to cross site scripting attacks on
+# MS IE and any other browser which fails to honor RFC2616. 
 
 ##
 ##  printenv -- demo CGI program which just prints its environment

diff --git a/docs/cgi-examples/printenv.vbs b/docs/cgi-examples/printenv.vbs
index ba8bcbc0ac68ce0a7d822b737ccd9ed4a24be588..9336d43263a7d44e33d8e25b0436bcfd1212d8ed 100644 (file)
--- a/docs/cgi-examples/printenv.vbs
+++ b/docs/cgi-examples/printenv.vbs
@@ -3,9 +3,12 @@
 ' To permit this cgi, replace ' on the first line above with the
 ' appropriate shebang, f.e. '!c:/windows/system32/cscript -nologo
 '
-' Note that it is subject to cross site scripting attacks on MS IE
-' and any other browser which fails to honor RFC2616, so never use
-' it in a live server environment, it is provided only for testing.
+' ***** !!! WARNING !!! *****
+' This script echoes the server environment variables and therefore
+' leaks information - so NEVER use it in a live server environment!
+' It is provided only for testing purpose.
+' Also note that it is subject to cross site scripting attacks on
+' MS IE and any other browser which fails to honor RFC2616. 
 
 ''
 ''  printenv -- demo CGI program which just prints its environment

diff --git a/docs/cgi-examples/printenv.wsf b/docs/cgi-examples/printenv.wsf
index c70b9a65c50de1d8692e9f60d270bd23e3f24905..d982eac21f660b25c620e164dc1ea01d227d84d6 100644 (file)
--- a/docs/cgi-examples/printenv.wsf
+++ b/docs/cgi-examples/printenv.wsf
@@ -3,9 +3,12 @@
 ' To permit this cgi, replace ' on the first line above with the
 ' appropriate shebang, f.e. '!c:/windows/system32/cscript -nologo
 '
-' Note that it is subject to cross site scripting attacks on MS IE
-' and any other browser which fails to honor RFC2616, so never use
-' it in a live server environment, it is provided only for testing.
+' ***** !!! WARNING !!! *****
+' This script echoes the server environment variables and therefore
+' leaks information - so NEVER use it in a live server environment!
+' It is provided only for testing purpose.
+' Also note that it is subject to cross site scripting attacks on
+' MS IE and any other browser which fails to honor RFC2616. 
 
 ''
 ''  printenv -- demo CGI program which just prints its environment

diff --git a/docs/cgi-examples/test-cgi b/docs/cgi-examples/test-cgi
index d92e0eccf8383da0672e9f6739305cf1a6cf5e93..eb80f3e4dbcdb95b7aade033dd1df8ffd4cc3d82 100644 (file)
--- a/docs/cgi-examples/test-cgi
+++ b/docs/cgi-examples/test-cgi
@@ -4,9 +4,12 @@
 # appropriate #!/path/to/sh shebang, and set this script executable
 # with chmod 755.
 #
-# Note that it is subject to cross site scripting attacks on MS IE
-# and any other browser which fails to honor RFC2616, so never use
-# it in a live server environment, it is provided only for testing.
+# ***** !!! WARNING !!! *****
+# This script echoes the server environment variables and therefore
+# leaks information - so NEVER use it in a live server environment!
+# It is provided only for testing purpose.
+# Also note that it is subject to cross site scripting attacks on
+# MS IE and any other browser which fails to honor RFC2616. 
 
 # disable filename globbing
 set -f