From fac3b0c9291495748ca470ec548f4bce4427da3d Mon Sep 17 00:00:00 2001
From: =?utf8?q?Andr=C3=A9=20Malo?= <nd@apache.org>
Date: Sat, 18 Dec 2010 20:01:39 +0000
Subject: [PATCH] update transformation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1050701 13f79535-47bb-0310-9956-ffa450edef68
---
 docs/manual/mod/mod_authz_core.html.en | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/docs/manual/mod/mod_authz_core.html.en b/docs/manual/mod/mod_authz_core.html.en
index 3011e94d84..ede01a2474 100644
--- a/docs/manual/mod/mod_authz_core.html.en
+++ b/docs/manual/mod/mod_authz_core.html.en
@@ -378,6 +378,12 @@ authentication succeeds but authorization fails
     <code class="directive">AuthzSendForbiddenOnFailure</code> allows to change the
     response code to '403 FORBIDDEN'.</p>
 
+    <div class="warning"><h3>Security Warning</h3>
+    <p>Modifying the response in case of missing authorization weakens the
+    security of the password, because it reveals to a possible attacker, that
+    his guessed password was right.</p>
+    </div>
+
 </div>
 <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
 <div class="directive-section"><h2><a name="Require" id="Require">Require</a> <a name="require" id="require">Directive</a></h2>
-- 
2.50.0