[Bug 70015] New: RewriteRule Directive: Per-directory Rewrites unclear/wrong about FollowSymLinks

https://bz.apache.org/bugzilla/show_bug.cgi?id=70015

            Bug ID: 70015
           Summary: RewriteRule Directive: Per-directory Rewrites
                    unclear/wrong about FollowSymLinks
           Product: Apache httpd-2
           Version: 2.5-HEAD
          Hardware: All
               URL: https://httpd.apache.org/docs/trunk/en/mod/mod_rewrite
                    .html#rewriterule
                OS: All
            Status: NEW
          Severity: minor
          Priority: P3
         Component: Documentation
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: ---

According to the documentation of the RewriteRule directive:
> To enable the rewrite engine in this context, you need to set "RewriteEngine On" and "Options FollowSymLinks" must be enabled. If your administrator has disabled override of FollowSymLinks for a user's directory, then you cannot use the rewrite engine. This restriction is required for security reasons.

This bullet should be reviewed on a few levels:
1. "Options FollowSymLinks" is the default. ‘"Options FollowSymLinks" must be
enabled’ should read ‘the FollowSymLinks option must be enabled’, ideally with
a link.
2. The SymLinksIfOwnerMatch option can also suffice.
3. It is not entirely clear what the second sentence tries to say, but it
should certainly be rewritten.
4. The last sentence would be more accurate as ‘This restriction was
implemented for security reasons.’ Ticket #70014 discusses getting rid of that
restriction, at least partially.

🅭🄍: https://www.philippecloutier.com/Common+infrastructure+licensing#its

-- 
You are receiving this mail because:
You are the assignee for the bug.