[SRU] mod_autoindex not configured for UTF-8

[John Nilsson]

Binary package hint: apache2.2-common

1. Install apache
2. Use autoindex to view a dir with UTF-8 encoded filenames
Result: Listing shown as ISO-8859-1

My fix: add Charset=UTF-8 to IndexOptions in /etc/apache2/mods-available/autoindex.conf

as such:
IndexOptions FancyIndexing VersionSort HTMLTable NameWidth=* DescriptionWidth=* Charset=UTF-8

This should be the default

[Chuck Short (zulcss)]

Thanks for the bugreport.

[Chuck Short (zulcss)]

Trivial fix that I added to the ssl bugfix for hardy.

Thanks
chuck

[Martin Pitt (pitti)]

Accepted into -proposed, please test and give feedback here

[Martin Pitt (pitti)]

Chuck, since we are otherwise in sync with Debian, can you please forward this fix to Debian? Thanks!

[Martin Pitt (pitti)]

Verification part 1: With the hardy final apache2, I can reproduce this bug. I created a file ~/public_html/fooääbar€.txt, sudo a2enmod userdir, and I got the scrambled file listing on http://localhost/~martin/foo/.

[Martin Pitt (pitti)]

I will do the verification for the -proposed package, assigning to me for this.

[Steve Langasek (vorlon)]

I'm very skeptical of including this change in an SRU, because there have been XSS vulnerabilities before in apache2 as a result of mod_autoindex charset handling. UTF-8 is certainly the reasonable default charset on Ubuntu, but it has been well before 8.04 as well, so I'm hesitant to have such a change made via SRU without some indication of why this wasn't changed much earlier.

[Martin Pitt (pitti)]

I updated to the hardy-proposed version and confirmed that the directory listing is correct now.

Steve's question of whether this should be applied at all should still be discussed, of course.

[Chuck Short (zulcss)]

The change wasnt made earlier because I might have forgotten it. It is already in debian so I dont see the harm, but it can be dropped if you wish.

chuck

[Martin Pitt (pitti)]

Copied to hardy-updates.