| Author |
Message |
sixonetonoffun
Major
Joined: Jan 13, 2003
Posts: 892
|
 Posted:
Mon Feb 24, 2003 8:09 am |
  |
|
   |
|
publicx2001
Premium
Joined: Feb 11, 2003
Posts: 172
Location: USA
|
| Posted:
Mon Feb 24, 2003 11:28 am |
|
just put the last line at the end of the rewrite or add this to it? |
|
|
 |
|
sixonetonoffun
Major
Joined: Jan 13, 2003
Posts: 892
|
| Posted:
Mon Feb 24, 2003 11:52 am |
|
I don't think it makes much difference where its put so long as these 2 lines are after rewriteengine on
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* - [F] |
_________________
www.netflake.com
www.glowoptics.com |
|
|
|
publicx2001
Premium
Joined: Feb 11, 2003
Posts: 172
Location: USA
|
| Posted:
Sun Mar 09, 2003 8:18 am |
|
is there any addition for the XSS exploit? |
|
|
|
|
Zhen-Xjell
Nuke Cops Founder
Joined: Nov 14, 2002
Posts: 5939
|
| Posted:
Sun Mar 09, 2003 8:41 am |
|
Any addition? |
_________________
Paul Laudanski, Microsoft MVP Windows-Security
CastleCops: [de] [en] [wiki] |
|
  |
|
publicx2001
Premium
Joined: Feb 11, 2003
Posts: 172
Location: USA
|
| Posted:
Sun Mar 09, 2003 9:31 am |
|
yes- and addition to the mod_rewrite rules to take care of XSS exploits.
in addition to the trace one as mentioned above. |
|
|
|
|
Zhen-Xjell
Nuke Cops Founder
Joined: Nov 14, 2002
Posts: 5939
|
| Posted:
Sun Mar 09, 2003 12:40 pm |
|
There are more that can be added for other XSS exploits, but you need to have certain apache mods installed like mod_security. |
_________________
Paul Laudanski, Microsoft MVP Windows-Security
CastleCops: [de] [en] [wiki] |
|
|
|
|
|
