From: Astrid Malo Date: Sun, 29 Jun 2003 10:24:23 +0000 (+0000) Subject: ScriptInterpreterSource Registry also uses the ExecCGI subkey X-Git-Tag: pre_ajp_proxy~1500 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=eb7e9735908533e8f76776d1be4c16d968d8b96a;p=apache ScriptInterpreterSource Registry also uses the ExecCGI subkey git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100392 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/mod/core.html.en b/docs/manual/mod/core.html.en index b30644e18d..3c1f118bfc 100644 --- a/docs/manual/mod/core.html.en +++ b/docs/manual/mod/core.html.en @@ -2504,9 +2504,10 @@ later cause the Windows Registry tree HKEY_CLASSES_ROOT to be searched using the script file extension (e.g., .pl) as a search key. The command defined by the registry subkey + Shell\ExecCGI\Command or if not exists by the subkey Shell\Open\Command is used to open the script file. In absence - of the file extension key or the Shell\Open\Command subkey - Apache uses the Script option.

+ of the file extension key or both subkeys Apache uses the + Script option.

Security

Be careful to use ScriptInterpreterSource Registry with @@ -2522,8 +2523,8 @@ later

The option Registry-Strict which is new in Apache 2.0 - does the same as Registry but uses the subkey - Shell\ExecCGI\Command instead. The ExecCGI key + does the same as Registry but uses only the subkey + Shell\ExecCGI\Command. The ExecCGI key is not a common one. It has to be configured manually and prevents your system from accidental program calls.

diff --git a/docs/manual/mod/core.xml b/docs/manual/mod/core.xml index bf0040b969..3e0c3425d0 100644 --- a/docs/manual/mod/core.xml +++ b/docs/manual/mod/core.xml @@ -2456,9 +2456,10 @@ later cause the Windows Registry tree HKEY_CLASSES_ROOT to be searched using the script file extension (e.g., .pl) as a search key. The command defined by the registry subkey + Shell\ExecCGI\Command or if not exists by the subkey Shell\Open\Command is used to open the script file. In absence - of the file extension key or the Shell\Open\Command subkey - Apache uses the Script option.

+ of the file extension key or both subkeys Apache uses the + Script option.

Security

Be careful to use ScriptInterpreterSource Registry with @@ -2474,8 +2475,8 @@ later

The option Registry-Strict which is new in Apache 2.0 - does the same as Registry but uses the subkey - Shell\ExecCGI\Command instead. The ExecCGI key + does the same as Registry but uses only the subkey + Shell\ExecCGI\Command. The ExecCGI key is not a common one. It has to be configured manually and prevents your system from accidental program calls.