[Bug 193753] Re: [SRU] mod_autoindex not configured for UTF-8

Steve Langasek steve.langasek at canonical.com
Wed May 14 09:10:35 BST 2008


I'm very skeptical of including this change in an SRU, because there
have been XSS vulnerabilities before in apache2 as a result of
mod_autoindex charset handling.  UTF-8 is certainly the reasonable
default charset on Ubuntu,  but it has been well before 8.04 as well, so
I'm hesitant to have such a change made via SRU without some indication
of why this wasn't changed much earlier.

-- 
[SRU] mod_autoindex not configured for UTF-8
https://bugs.launchpad.net/bugs/193753
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.



More information about the Ubuntu-server-bugs mailing list