[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Authz on Collection of Repositories

From: Branko ÄŒibej <brane_at_wandisco.com>
Date: Mon, 05 Nov 2012 09:11:50 +0100

On 05.11.2012 00:21, Thomas Ã…kesson wrote:
> I did some tests with curl --head just as a sanity check. It seems to be a good choice for access control. I primarily wanted to see that HEAD requests were not allowed in situations where GET is not (e.g. when user has access in directories below).
>
> The HEAD requests I performed (minimal curl command) did not cause the server to provide Content-Length when returning "200 OK".

Which is precisely what I was talking about in my other post. Such HEAD
responses are invalid. If we implement HEAD, we have to do it correctly.

-- Brane
Received on 2012-11-05 09:12:28 CET

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.