head	1.4;
access;
symbols
	TIGRIS_1_1_0RC2:1.2.12.2
	TIGRIS_1_1_0RC1:1.2.12.2
	TIGRIS_1_1:1.2.12.2.0.2
	TIGRIS_1_0_8:1.2
	TIGRIS_1_0_8RC3:1.2
	TIGRIS_1_0_8RC2:1.2
	TIGRIS_1_0_8RC1:1.2
	TIGRIS_1_0_7:1.2
	TIGRIS_1_0_7RC3:1.2
	TIGRIS_1_0_7RC2:1.2
	TIGRIS_1_0_7RC1:1.2
	TIGRIS_1_0_6:1.2
	TIGRIS_1_0_6RC5:1.2
	TIGRIS_1_0_6RC4:1.2
	TIGRIS_1_0_6RC3:1.2
	TIGRIS_1_0_6RC2:1.2
	TIGRIS_1_0_6RC1:1.2
	TIGRIS_1_0_5:1.2
	TIGRIS_1_0_5RC6:1.2
	TIGRIS_1_0_5RC5:1.2
	TIGRIS_1_0_5RC4:1.2
	TIGRIS_1_0_5RC3:1.2
	TIGRIS_1_0_5RC2:1.2
	TIGRIS_1_0_5RC1:1.2
	TIGRIS_1_0_4:1.2
	TIGRIS_1_0_3:1.2
	TIGRIS_1_0_2:1.2
	TIGRIS_1_0_1:1.2
	TIGRIS_1_0:1.2.0.12
	TIGRIS_1_0_0:1.2
	TIGRIS_1_0_0_RC1:1.2.0.8
	dlr:1.1.1
	TIGRIS_0_9_2_4:1.2
	TIGRIS_0_9_2_3:1.2
	HELM_PEER_PORT_BRANCH:1.1.1.1
	TURBINE_PEER:1.2
	TIGRIS_0_9_2_1:1.2
	TIGRIS_0_9_2:1.2.0.6
	TIGRIS_0_9_0:1.2.0.4
	TIGRIS_0_8_4:1.2.0.2;
locks; strict;
comment	@# @;


1.4
date	2001.08.02.00.56.00;	author edk;	state Exp;
branches;
next	1.3;

1.3
date	2001.06.12.20.01.08;	author ms;	state Exp;
branches;
next	1.2;

1.2
date	2000.12.02.23.08.16;	author edk;	state Exp;
branches
	1.2.12.1;
next	1.1;

1.1
date	2000.11.15.19.00.28;	author edk;	state Exp;
branches
	1.1.1.1;
next	;

1.1.1.1
date	2001.02.21.00.28.03;	author dlr;	state Exp;
branches;
next	;

1.2.12.1
date	2001.08.02.00.55.05;	author edk;	state Exp;
branches;
next	1.2.12.2;

1.2.12.2
date	2001.08.02.00.56.22;	author edk;	state Exp;
branches;
next	;


desc
@@


1.4
log
@be a bit more paranoid about disallowed URLs
@
text
@################
# a special case, for TLogin ... 'cause otherwise you can't ever log in
# unless you happen to be looking at something w/in /servlets/ 

RewriteRule /TLogin$ /servlets/TLogin [PT,L]

################
# forbid access to servlets via fully qualified package names, for security
# reasons
RewriteRule ^/+servlets/+[^/]+\.[^/] /servlets/StartPage [PT,L]

@


1.3
log
@fixed rewrite rule from directing all urls with 'servlets' in them to the StartPage
@
text
@d10 1
a10 1
RewriteRule ^/servlets/[^/]+\.[^/] /servlets/StartPage [PT,L]
@


1.2
log
@for security reasons, all servlets should be specified in the servlets
file; anything not there shouldn't be used.  redirecting the request
to the StartPage seems a reasonable way to handle such requests.
@
text
@d10 1
a10 1
RewriteRule /servlets/[^/]+\.[^/] /servlets/StartPage [PT,L]
@


1.2.12.1
log
@allow URLs which contain /servlets/ so long as that's not the start
of the relative path
Submitted by:  Michael Salmon <ms@@tigris.org>
Reviewed by:   Ed Korthof <edk@@tigris.org>
@
text
@d10 1
a10 1
RewriteRule ^/+servlets/[^/]+\.[^/] /servlets/StartPage [PT,L]
@


1.2.12.2
log
@be a bit more paranoid about disallowed URLs
@
text
@d10 1
a10 1
RewriteRule ^/+servlets/+[^/]+\.[^/] /servlets/StartPage [PT,L]
@


1.1
log
@move the rule for TLogin into a file which will be included before any of
the other components (cvsweb & issuezilla).
@
text
@d7 5
@


1.1.1.1
log
@Replacing the HEAD with the HELM_PEER_PORT_BRANCH.
@
text
@a6 5
################
# forbid access to servlets via fully qualified package names, for security
# reasons
RewriteRule /servlets/[^/]+\.[^/] /servlets/StartPage [PT,L]

@


