Commit 10b48990 authored by Till Brehm's avatar Till Brehm

Fix #4699: Static AuthName for WebDav in Aapache (Fixes DoS vulnerability)

parent d0d2afa4
......@@ -2785,7 +2785,7 @@ class apache2_plugin {
$output .= " DAV On\n";
$output .= ' BrowserMatch "MSIE" AuthDigestEnableQueryStringHack=On'."\n";
$output .= " AuthType Digest\n";
$output .= " AuthName \"" . $fn . "\"\n";
$output .= " AuthName \"Restricted Area\"\n";
$output .= " AuthUserFile " . $webdavRoot . '/' . $file . "\n";
$output .= " Require valid-user \n";
$output .= " Options +Indexes \n";
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment