[MapServer-dev] Allow UNC map and context paths in Windows CGI validation

[Tamas Szekeres]

Hi Jeff,

I prefer to close this ticket without including the PR since we have the
option to override the default setting in the mapserver config file.

Best regards,

Tamas


Jeff McKenna via MapServer-dev <mapserver-dev at lists.osgeo.org> ezt írta
(időpont: 2026. okt. 20., K, 13:25):

> Hi Tamas,
>
> It sounds like you are going to tackle this through documentation
> instead.  Please make sure to make the warning stand-out in the doc
> (using the 'warning' directive) as this change could be a major security
> vulnerability - or, I can add that warning later.
>
> thanks,
>
> -jeff
>
>
>
>
>
> On 2026-10-18 3:11 p.m., Tamas Szekeres via MapServer-dev wrote:
> > Hi Developers,
> >
> > We had a discussion <https://lists.osgeo.org/pipermail/mapserver-
> > dev/2022-February/016699.html> a couple of years ago about allowing UNC
> > paths in mapfiles on Windows. I've created a ticket <https://github.com/
> > MapServer/MapServer/issues/7668> and a suggested PR <https://github.com/
> > MapServer/MapServer/pull/7669> to implement the change, but I'm a bit
> > uncertain whether this requires an RFC and voting or we can treat this
> > as a bugfix only. Let me know what you think.
> >
> > Best regards,
> >
> > Tamas
> >
> >
> _______________________________________________
> MapServer-dev mailing list
> MapServer-dev at lists.osgeo.org
> https://lists.osgeo.org/mailman/listinfo/mapserver-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/mapserver-dev/attachments/20261020/e083b261/attachment-0001.htm>