I figured out that the reqrite rules seems not match request with trailing slash. In this case the page is build dynamically.

I added following rule to the top of .htaccess, to remove the trailing slash from all requests. In my view, they are misformed anyway, afik drupal grants no access to folders at all.

RewriteCond %{REQUEST_URI} /$
RewriteRule  ^(.*)/$ /$1 [PT]

In our case those requests seems came from an spider or website copy tool. This caused an overload to our server, which have poor performance anyway.
I think that's not really an security issue, or should it threaded as one?

Comments

mikeytown2’s picture

mikeytown2 commented
Status: Active » Closed (fixed)

Closing all 5.x issues; will only reevaluate if someone steps up #454652: Looking for a co-maintainer - 5.x

Reason is 6.x has 10x as many users as 5.x; also last 5.x dev was over a year ago. The 5.x issue queue needs to go.