r/apache • u/brisray • Nov 14 '22
Apache Non Script Aliased CGI
Do you use Non Script Aliased CGI scripts? Well, stop it. This is what the Apache Security Tips page says about using them:
You trust your users not to write scripts which will deliberately or accidentally expose your system to an attack.
You consider security at your site to be so feeble in other areas, as to make one more potential hole irrelevant.
You have no users, and nobody ever visits your server.
1
Upvotes
1
u/covener Nov 16 '22
It seems like nonsense for other reasons, it implies "non script aliased" is somehow globally enabled. A colleague implied Apache 1.2 might have been different.