Added warning for AllowOverrideList None in the mod-core doc (PR 58528)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1737382 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/docs/manual/mod/core.xml b/docs/manual/mod/core.xml
index 54c3f35d18be51a76701012afa364774617b45d7..a0b5d28b6f3bb5cd9f64f36f30e542733cc279ec 100644 (file)
--- a/docs/manual/mod/core.xml
+++ b/docs/manual/mod/core.xml
@@ -328,6 +328,14 @@ NoDecode option available in 2.3.12 and later.</compatibility>
     completely ignored. In this case, the server will not even attempt
     to read <code>.htaccess</code> files in the filesystem.</p>
 
+    <note><title>AllowOverrideList bug in versions &lt;= 2.4.18</title>
+    <p><directive module="core">AllowOverrideList</directive> will not prevent 
+    .htaccess files processing when explicitly set with None in httpd versions &lt;= 2.4.18 due to a 
+    <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=58528">bug</a>.
+    Set only <directive module="core">AllowOverride</directive> to None as workaround if 
+    you are unable to upgrade to httpd &gt; 2.4.18</p>
+    </note>
+
     <p>When this directive is set to <code>All</code>, then any
     directive which has the .htaccess <a
     href="directive-dict.html#Context">Context</a> is allowed in
@@ -520,6 +528,14 @@ AllowOverride AuthConfig Indexes
     ignored.  In this case, the server will not even attempt to read
     <code>.htaccess</code> files in the filesystem.</p>
 
+    <note><title>AllowOverrideList bug in versions &lt;= 2.4.18</title>
+    <p><directive module="core">AllowOverrideList</directive> will not prevent 
+    .htaccess files processing when explicitly set with None in httpd versions &lt;= 2.4.18 due to a 
+    <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=58528">bug</a>.
+    Set only <directive module="core">AllowOverride</directive> to None as workaround if 
+    you are unable to upgrade to httpd &gt; 2.4.18</p>
+    </note>
+
     <p>Example:</p>
 
     <highlight language="config">