From eb716dd8fd735b127d882fa3bfafacaffe7869e8 Mon Sep 17 00:00:00 2001 From: Colm MacCarthaigh Date: Sat, 29 Oct 2005 10:11:30 +0000 Subject: [PATCH] Update the transformations git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@329391 13f79535-47bb-0310-9956-ffa450edef68 --- docs/manual/caching.html.en | 25 ++++++++++++++++++ docs/manual/mod/mod_cache.html.en | 6 +++++ docs/manual/mod/mod_cache.xml.ja | 2 +- docs/manual/mod/mod_cache.xml.ko | 2 +- docs/manual/mod/mod_dbd.html.en | 2 +- docs/manual/mod/mod_dir.html.en | 2 +- docs/manual/mod/mod_dir.html.ja.euc-jp | 2 ++ docs/manual/mod/mod_dir.html.ko.euc-kr | 2 ++ docs/manual/mod/mod_dir.xml.ja | 2 +- docs/manual/mod/mod_dir.xml.ko | 2 +- docs/manual/mod/mod_dir.xml.meta | 4 +-- docs/manual/mod/mod_filter.html.en | 12 +++++++-- docs/manual/mod/mod_mime.html.en | 2 +- docs/manual/mod/mod_mime.xml.ja | 2 +- docs/manual/mod/mpm_common.html.en | 2 +- docs/manual/mod/quickreference.html.de | 26 +++++++++---------- docs/manual/mod/quickreference.html.en | 26 +++++++++---------- docs/manual/mod/quickreference.html.es | 26 +++++++++---------- docs/manual/mod/quickreference.html.ja.euc-jp | 26 +++++++++---------- docs/manual/mod/quickreference.html.ko.euc-kr | 26 +++++++++---------- docs/manual/new_features_2_2.html.en | 14 +++++----- docs/manual/new_features_2_2.xml.ko | 2 +- docs/manual/new_features_2_2.xml.pt-br | 2 +- docs/manual/programs/configure.xml.ko | 2 +- 24 files changed, 131 insertions(+), 88 deletions(-) diff --git a/docs/manual/caching.html.en b/docs/manual/caching.html.en index fd4c5caaf4..6d4f835f7d 100644 --- a/docs/manual/caching.html.en +++ b/docs/manual/caching.html.en @@ -297,6 +297,31 @@ Vary: negotiate,accept-language,accept-charset

Security Considerations

+

Authorisation, Access & and Control

+ + +

Using mod_cache is very much like having a built + in reverse-proxy. Requests will be served by the caching module unless + it determines that the backend should be queried. When caching local + resources, this drastically changes the security model of Apache.

+ +

As traversing a filesystem hierarchy to examine potential + .htaccess files would be a very expensive operation, + partially defeating the point of caching (to speed up requests), + mod_cache makes no decision about whether a cached + entity is authorised for serving. In other words; if + mod_cache has cached some content, it will be served + from the cache as long as that content has not expired.

+ +

If, for example, your configuration permits access to a resource by IP + address you should ensure that this content is not cached. You can do this by + using the CacheDisable + directive, or mod_expires. Left unchecked, + mod_cache - very much like a reverse proxy - would cache + the content when served and then serve it to any client, on any IP + address.

+ +

Local exploits

diff --git a/docs/manual/mod/mod_cache.html.en b/docs/manual/mod/mod_cache.html.en index c408f4b27a..845c1d8c19 100644 --- a/docs/manual/mod/mod_cache.html.en +++ b/docs/manual/mod/mod_cache.html.en @@ -31,6 +31,12 @@ Source File:mod_cache.c

Summary

+
This module should be used with care and + can be used to circumvent Allow and Deny directives. You + should not enable caching for any content to which you wish + to limit access by client host name, address or environment + variable.
+

mod_cache implements an RFC 2616 compliant HTTP content cache that can be used to cache either local or proxied content. mod_cache requires the services of one or more storage diff --git a/docs/manual/mod/mod_cache.xml.ja b/docs/manual/mod/mod_cache.xml.ja index 599cd6e2fa..a55d3a2fb7 100644 --- a/docs/manual/mod/mod_cache.xml.ja +++ b/docs/manual/mod/mod_cache.xml.ja @@ -1,7 +1,7 @@ - + + + + + + + +