Pekka Helenius
5 years ago
committed by
GitHub
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 31 additions and 19 deletions
Split View
Diff Options
+ 31
- 19
patches/patch_apache_disable_additional_errormsg.patch
View File
| @ -1,24 +1,36 @@ | |||
| Author: Pekka Helenius (~Fincer), 2018 | |||
| uthor: Pekka Helenius (~Fincer), 2018 | |||
| Patch: Remove additional error string from Apache server HTTP-based HTML output message. Especially, do not give any clear hints about existence of Apache ErrorDocument parameter to the client. | |||
| Patch: Remove error HTML body from Apache server output message | |||
| This patch is useful for obfuscating server identity to a client but can bury underneath problems in server configuration and thus hamper debugging of errors which are based on HTTP return codes. Thus, use discretion before implementing the patch in your Apache server configuration. | |||
| Removes additional error messages as well. | |||
| Do not give any hints about existence of Apache ErrorDocument to the client | |||
| --- a/modules/http/http_protocol.c | |||
| +++ b/modules/http/http_protocol.c | |||
| @@ -1542,12 +1542,12 @@ AP_DECLARE(void) ap_send_error_response( | |||
| get_canned_error_string(status, r, location), | |||
| NULL); | |||
| - if (recursive_error) { | |||
| + /*if (recursive_error) { | |||
| ap_rvputs_proto_in_ascii(r, "<p>Additionally, a ", | |||
| status_lines[ap_index_of_response(recursive_error)], | |||
| "\nerror was encountered while trying to use an " | |||
| This patch is useful in some cases but can bury underneath problems in server | |||
| configuration. Thus, use discretion before implementing the patch | |||
| in your Apache server. | |||
| This patch removes default error pages returned by an erroneous HTTP request. | |||
| If you need to use error pages, customize them in your Apache configs. | |||
| @@ -1531,7 +1531,7 @@ AP_DECLARE(void) ap_send_error_response( | |||
| /* can't count on a charset filter being in place here, | |||
| * so do ebcdic->ascii translation explicitly (if needed) | |||
| */ | |||
| - | |||
| +/* | |||
| ap_rvputs_proto_in_ascii(r, | |||
| DOCTYPE_HTML_2_0 | |||
| "<html><head>\n<title>", title, | |||
| @@ -1549,9 +1549,9 @@ AP_DECLARE(void) ap_send_error_response( | |||
| "ErrorDocument to handle the request.</p>\n", NULL); | |||
| - } | |||
| + }*/ | |||
| } | |||
| ap_rvputs_proto_in_ascii(r, ap_psignature("<hr>\n", r), NULL); | |||
| ap_rvputs_proto_in_ascii(r, "</body></html>\n", NULL); | |||
| } | |||
| - ap_rvputs_proto_in_ascii(r, "</body></html>\n", NULL); | |||
| - } | |||
| - ap_finalize_request_protocol(r); | |||
| + ap_rvputs_proto_in_ascii(r, "</body></html>\n", NULL);*/ | |||
| + }/* | |||
| + ap_finalize_request_protocol(r);*/ | |||
| } | |||
| /* | |||