{"push_id":881342827,"size":2,"distinct_size":0,"ref":"refs/heads/master-tag","head":"fc0692b7e1a9ab2b2a95c3070f4502f17ba27aa5","before":"bf864368f1259e6d1f9efb60aecc4473b7bba165","commits":[{"sha":"ddb6e4f81dd573a282e95028d2e220d564cc6ecd","author":{"email":"c95c20ec9964d10a33a969aefbd62f588e076c3f@puppetlabs.com","name":"David Schmitt"},"message":"(MODULES-2682) Update Apache Configuration to use FilesMatch instead of AddHandler for PHP Files.\n\nThe issue with this is that the extension handling behaviour of apache is\nnot well known by most php developers, and many php scripts are open to\nsecurity issues if this configuration is used (most commonly these scripts\nhandle upload forms which white list image extensions). For example\nfoo.php.jpg will be handled by php.\n\nMany distro's no longer use AddHandler in their default config:\n  http://bazaar.launchpad.net/~ubuntu-branches/ubuntu/vivid/php5/vivid/view/head:/debian/php5.conf.\n\nThe PHP manual also recommends avoiding it:\n  http://php.net/manual/en/install.unix.apache2.php#example-20\n\nThis is based on Alejandro Bednarik's <alejandro.bednarik@gmail.com> original\nfix, I added proper regex escaping, and a changelog entry. All bugs are mine.","distinct":false,"url":"https://api.github.com/repos/rdo-puppet-modules/puppetlabs-apache/commits/ddb6e4f81dd573a282e95028d2e220d564cc6ecd"},{"sha":"fc0692b7e1a9ab2b2a95c3070f4502f17ba27aa5","author":{"email":"0bca73046bc3d6e3807a3cb5bbbbec53be31f74d@users.noreply.github.com","name":"TP Honey"},"message":"Merge pull request #1277 from DavidS/modules-2682-fix-php-configuration\n\n(MODULES-2682) Update Apache Configuration to use FilesMatch instead …","distinct":false,"url":"https://api.github.com/repos/rdo-puppet-modules/puppetlabs-apache/commits/fc0692b7e1a9ab2b2a95c3070f4502f17ba27aa5"}]}