From: Elan Ruusamäe <glen@pld-linux.org>
Date: Thu, 25 Nov 2010 11:29:34 +0000 (+0000)
Subject: - forbid access to CVS or RCS dirs in a way allowing still access files named CVS.txt
X-Git-Tag: auto/ac/lighttpd-1_4_28-5
X-Git-Url: http://git.pld-linux.org/?a=commitdiff_plain;ds=sidebyside;h=8aa8315408c45061e36357ae9f8742d379c65f77;p=packages%2Flighttpd.git

- forbid access to CVS or RCS dirs in a way allowing still access files named CVS.txt

Changed files:
    lighttpd-mod_access.conf -> 1.5
    lighttpd.spec -> 1.342
---

diff --git a/lighttpd-mod_access.conf b/lighttpd-mod_access.conf
index c057dac..30e6d1a 100644
--- a/lighttpd-mod_access.conf
+++ b/lighttpd-mod_access.conf
@@ -14,6 +14,7 @@ server.modules += (
 # *,v and *,t - CVS files
 url.access-deny = ( "~", ".inc", ",v", ",t" )
 
-$HTTP["url"] =~ "(?:CVS|RCS)" {
+# forbid access to files inside CVS or RCS dirs
+$HTTP["url"] =~ "/(?:CVS|RCS)/" {
 	url.access-deny = ("")
 }
diff --git a/lighttpd.spec b/lighttpd.spec
index 292cf52..4b608aa 100644
--- a/lighttpd.spec
+++ b/lighttpd.spec
@@ -25,7 +25,7 @@ Summary:	Fast and light HTTP server
 Summary(pl.UTF-8):	Szybki i lekki serwer HTTP
 Name:		lighttpd
 Version:	1.4.28
-Release:	4
+Release:	5
 License:	BSD
 Group:		Networking/Daemons/HTTP
 Source0:	http://download.lighttpd.net/lighttpd/releases-1.4.x/%{name}-%{version}.tar.bz2