svn commit: r1936134 - httpd/httpd/trunk
[email protected] Tue, 14 Jul 2026 14:25:20 -0000
| Newsgroups | gmane.comp.apache.cvs |
|---|---|
| Message-ID | <178403912048.313681.5170054608520514586@svn03-he-fi> |
Author: jorton Date: Tue Jul 14 14:25:20 2026 New Revision: 1936134 Log: * SECURITY.md: Typos/formatting fixes suggested by Claude. Modified: httpd/httpd/trunk/SECURITY.md Modified: httpd/httpd/trunk/SECURITY.md ============================================================================== --- httpd/httpd/trunk/SECURITY.md Tue Jul 14 14:23:53 2026 (r1936133) +++ httpd/httpd/trunk/SECURITY.md Tue Jul 14 14:25:20 2026 (r1936134) @@ -26,7 +26,7 @@ Vulnerabilities](http://httpd.apache.org If an issue is reported against an aspect of the security model which is not documented here, it MUST be accompanied by a clear description -of that aspect the model, showing why a trust boundary exists and how +of that aspect of the model, showing why a trust boundary exists and how it is violated. It is helpful to use references to vulnerabilities previously disclosed by this project, the httpd documentation (see docs/manual), and to demonstrate common usage patterns. @@ -81,7 +81,7 @@ configurable limits; e.g. LimitRequestFi consumption by HTTP headers, LimitXMLRequestBody limits the RAM consumption by parsing XML request documents. -Example vulnerabilities which violated the model: CVE-2004-0942 +Example vulnerabilities which violated the model: CVE-2004-0942. ## Privilege separation on Unix platforms @@ -107,7 +107,7 @@ model. Example vulnerabilities which violated the model: CVE-2007-3304, CVE-2012-0031. -## Delegated Configuration +## Delegated Configuration Server configuration can be delegated to trusted local site authors by allowing use of .htaccess files in some configurations (see