4 ms·
Commonly used in access control to check IP addresses, usernames, cookies, query params, URI paths, environment variables ... Also filtering REQUEST_METHOD to a
by mrspuratic 1y ago
Commonly used in access control to check IP addresses, usernames, cookies, query params, URI paths, environment variables ...
Also filtering REQUEST_METHOD to allowed verbs is good practice.
- mrspuratic 1y agoAnti-"image theft" example from Apache httpd documentation that would break with this bug: RewriteCond expr "! %{HTTP_REFERER} -strmatch '*://%{HTTP_HOST}/*'" RewriteRule "^/images" "-" [F]