[mod-security-users] Webdav won't work with SecFilter
Brought to you by:
victorhora,
zimmerletw
|
From: <li...@32...> - 2005-11-23 18:54:45
|
Hello, I am running Mac OS X Tiger. When I attempt to connect to my webdav folder I cannot. The 2 secfilters blocking me are as follows... #XSS Attacks SecFilter "<(.|\n)+>" # Only accept request encodings we know how to handle # we exclude GET requests from this because some (automated) # clients supply "text/html" as Content-Type SecFilterSelective HTTP_Content-Type "!(^$|^application/x-www-form-urlencoded$|^multipart/form-data)" Is there any changes I can make to the secfilter syntax so webdav will work, BUT not opening up possible exploit paths? Thanks -Mike |