Posted by Steven Saunderson on 10/02/14 11:44

On Fri, 07 Apr 2006 22:52:25 -0700, Jim Moe
<jmm-list.AXSPAMGN@sohnen-moe.com> wrote:

>John Salerno wrote:
>> Here's the link, if it helps: http://python.johnjsalerno.com/
>>
>> I have the Python logo set at the top of the page, but the alternate
>> text gets displayed instead.
>>
> src="../icons/python-logo.gif"
> Yes, it is because you are in a subdomain. Its DocumentRoot (using
>apache terminology) does not share the same space as the main domain. You
>are asking to go to a directory that is higher (more "rooty", a
>super-root?) than the root directory of the subdomain.

I thought that it might be a security issue (accessing beneath the root
for the subdomain) but I have seen pages that request files (e.g. CSS)
that are lower (more "rooty"). I checked with Opera and it drops the
leading '..' when building the URL for the image. This doesn't happen
in the other cases I have seen as they have a path after the domain
name. So the '..' must be processed by the browser rather than being
passed back to the server. If the browser can't drop the last level in
the path it just ignores the '..'.

--
Steven

[Back to original message]