Re: PATCH: FAQ update re. preventing browsing of .svn

On 2/25/06, Max Bowsher <maxb1@ukf.net> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Greg Thomas wrote:
> > [[[
> > * www/faq.html (website-auto-update): Use a much simpler 404 error to
> > prevent browsing of the admin directory.
> > ]]]
>
> But the existing version is more accurate (403 vs. 404), and is clearly
> an access restriction, instead of being disguised as a redirect, so I
> prefer to maintain the existing version.

It stuck me that whilst 403 is more accurate, if you're trying to
disguise the fact that WWW site is a working copy, a 404 may be more
appropriate.

However, I'm not too worred; just thought I'd bring it up as I spotted
it whilst browsing the FAQ - I did compose an email to bring it up,
but then it struck me as just as easy to submit a patch as a
discussion point.

Greg

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Sun Mar 5 13:34:59 2006