From: Cliff Woolley <jwoolley@apache.org>
Date: Mon, 5 Aug 2002 20:41:42 +0000 (+0000)
Subject: update transform
X-Git-Tag: 2.0.40~17
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=0dbcbba934a8f0ec8c5a03efa34c9cf9af824c0e;p=apache

update transform


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@96312 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/docs/manual/mod/mod_info.html.en b/docs/manual/mod/mod_info.html.en
index 89e408c183..660eebf90c 100644
--- a/docs/manual/mod/mod_info.html.en
+++ b/docs/manual/mod/mod_info.html.en
@@ -43,6 +43,14 @@ SetHandler server-info<br>
       files, including <em>per</em>-directory files (<em>e.g.</em>,
       <code>.htaccess</code>). This may have security-related
       ramifications for your site.</p>
+
+      <p>In particular, this module can leak sensitive information
+      from the configuration directives of other Apache modules such as
+      system paths, usernames/passwords, database names, etc.  Due to
+      the way this module works there is no way to block information
+      from it.  Therefore, this module should ONLY be used in a controlled
+      environment and always with caution.</p>
+
     </td></tr></table></blockquote>
 <h2>Directives</h2><ul><li><a href="#addmoduleinfo">AddModuleInfo</a></li></ul><hr><h2><a name="AddModuleInfo">AddModuleInfo</a> <a name="addmoduleinfo">Directive</a></h2><table cellpadding="1" cellspacing="0" border="0" bgcolor="#cccccc"><tr><td><table bgcolor="#ffffff"><tr><td nowrap="nowrap"><strong>Description: 
                   </strong></td><td>Allows additional information to be added to the module