From: Luca Toscano <elukey@apache.org>
Date: Fri, 1 Apr 2016 13:31:28 +0000 (+0000)
Subject: Added warning for AllowOverrideList None in the mod-core doc (PR 58528)
X-Git-Tag: 2.5.0-alpha~1803
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=ea05e5bb228e8616eccf30756c63f122c1d96247;p=apache

Added warning for AllowOverrideList None in the mod-core doc (PR 58528)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1737382 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/docs/manual/mod/core.xml b/docs/manual/mod/core.xml
index 54c3f35d18..a0b5d28b6f 100644
--- a/docs/manual/mod/core.xml
+++ b/docs/manual/mod/core.xml
@@ -328,6 +328,14 @@ NoDecode option available in 2.3.12 and later.</compatibility>
     completely ignored. In this case, the server will not even attempt
     to read <code>.htaccess</code> files in the filesystem.</p>
 
+    <note><title>AllowOverrideList bug in versions &lt;= 2.4.18</title>
+    <p><directive module="core">AllowOverrideList</directive> will not prevent 
+    .htaccess files processing when explicitly set with None in httpd versions &lt;= 2.4.18 due to a 
+    <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=58528">bug</a>.
+    Set only <directive module="core">AllowOverride</directive> to None as workaround if 
+    you are unable to upgrade to httpd &gt; 2.4.18</p>
+    </note>
+
     <p>When this directive is set to <code>All</code>, then any
     directive which has the .htaccess <a
     href="directive-dict.html#Context">Context</a> is allowed in
@@ -520,6 +528,14 @@ AllowOverride AuthConfig Indexes
     ignored.  In this case, the server will not even attempt to read
     <code>.htaccess</code> files in the filesystem.</p>
 
+    <note><title>AllowOverrideList bug in versions &lt;= 2.4.18</title>
+    <p><directive module="core">AllowOverrideList</directive> will not prevent 
+    .htaccess files processing when explicitly set with None in httpd versions &lt;= 2.4.18 due to a 
+    <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=58528">bug</a>.
+    Set only <directive module="core">AllowOverride</directive> to None as workaround if 
+    you are unable to upgrade to httpd &gt; 2.4.18</p>
+    </note>
+
     <p>Example:</p>
 
     <highlight language="config">