« June 2007 | Main | October 2007 »
From the Apache HTTP Server manual:
It is important to never use
<Location>when trying to restrict access to objects in the filesystem. This is because many different webspace locations (URLs) could map to the same filesystem location, allowing your restrictions to be circumvented.
Apparently, (1) the same thing applies to Microsoft IIS and (2) our IT department is not aware of it.
As a French speaker and Apple Mail user, I hope this bug will be fixed presto. I found it from this discussion on webkit-dev.
It’s important for me as a Mac developer to use Windows once in a while, because it’s a fantastic lesson on how do absolutely everything wrong when designing software. (For example, one of my top ten favorite Windows XP features is the one where it asks you to confirm your wireless network password by entering it twice when you join a network.)
I had forgotten about this one.