www-server/apache: remove unused patch
authorMichael Mair-Keimberger <m.mairkeimberger@gmail.com>
Sun, 3 Dec 2017 08:43:14 +0000 (09:43 +0100)
committerLars Wendler <polynomial-c@gentoo.org>
Sun, 3 Dec 2017 12:40:33 +0000 (13:40 +0100)
www-servers/apache/files/apache-asf-httpoxy.patch [deleted file]

diff --git a/www-servers/apache/files/apache-asf-httpoxy.patch b/www-servers/apache/files/apache-asf-httpoxy.patch
deleted file mode 100644 (file)
index 68e3d86..0000000
+++ /dev/null
@@ -1,20 +0,0 @@
-https://bugs.gentoo.org/589226
-https://www.apache.org/security/asf-httpoxy-response.txt
-
---- server/util_script.c       (revision 1752426)
-+++ server/util_script.c       (working copy)
-@@ -186,6 +186,14 @@ AP_DECLARE(void) ap_add_common_vars(request_rec *r
-         else if (!strcasecmp(hdrs[i].key, "Content-length")) {
-             apr_table_addn(e, "CONTENT_LENGTH", hdrs[i].val);
-         }
-+        /* HTTP_PROXY collides with a popular envvar used to configure
-+         * proxies, don't let clients set/override it.  But, if you must...
-+         */
-+#ifndef SECURITY_HOLE_PASS_PROXY
-+        else if (!strcasecmp(hdrs[i].key, "Proxy")) {
-+            ;
-+        }
-+#endif
-         /*
-          * You really don't want to disable this check, since it leaves you
-          * wide open to CGIs stealing passwords and people viewing them