[patch] add IgnoreClient to defaults for IndexOptions

00_mod_autoindex.conf.patch (text/plain), 697 bytes, created by Steve Dibb (RETIRED) on 2011-10-14 18:50:58 UTC

--- conf/modules.d/00_mod_autoindex.conf.orig	2011-10-14 12:18:01.000000000 -0600
+++ conf/modules.d/00_mod_autoindex.conf	2011-10-14 12:18:30.000000000 -0600
@@ -20,7 +20,10 @@
 
 # IndexOptions: Controls the appearance of server-generated directory
 # listings.
-IndexOptions FancyIndexing VersionSort
+# For security, the 'IgnoreClient' option is added to the defaults.
+# # See http://httpd.apache.org/security/vulnerabilities_22.html and
+# # http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419
+IndexOptions FancyIndexing VersionSort IgnoreClient
 
 # AddIcon* directives tell the server which icon to show for different
 # files or filename extensions.  These are only displayed for