Skip to content

remove lighttpd version check in CGIRootFix#1141

Merged
davidism merged 1 commit intopallets:masterfrom
saltcandy123:fix-lighttpd-version-check
Nov 22, 2018
Merged

remove lighttpd version check in CGIRootFix#1141
davidism merged 1 commit intopallets:masterfrom
saltcandy123:fix-lighttpd-version-check

Conversation

@saltcandy123
Copy link
Copy Markdown
Contributor

According to #266, CGIRootFix is not only for lighttpd now.
So, SERVER_SOFTWARE should not be assumed to start with 'lighttpd/', as this value can be 'Apache/x.x.x' (less than 'lighttpd/1.4.28') or 'nginx/x.x.x' (greater), for example.

@davidism
Copy link
Copy Markdown
Member

@untitaker maybe that whole if statement can be removed?

@ThiefMaster
Copy link
Copy Markdown
Member

👍 on removing it. people should not use this kind of middleware unconditionally but either use a custom wsgi file applying it or add a config option to determine whether to use it or not

@untitaker
Copy link
Copy Markdown
Contributor

untitaker commented Jun 25, 2017 via email

@davidism
Copy link
Copy Markdown
Member

I'm removing the entire check. It's addressing servers before Lighttpd 1.4.28, which was released in 2010. We can move on.

@davidism davidism changed the title fix lighttpd version check in CGIRootFix remove lighttpd version check in CGIRootFix Nov 22, 2018
@davidism davidism added this to the 0.15 milestone Nov 22, 2018
show deprecation for LighttpdCGIRootFix name
@davidism davidism merged commit 4d30c23 into pallets:master Nov 22, 2018
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Nov 13, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants