At the moment, the Apache configuration denies by "AllowOverride None" all local customizations with .htaccess. This should be relaxed.
My use case is setting environment variables with "SetEnv" directives for CGI scripts; this needs assessment whether suphp can be rooted with that.
Version: unspecified
Severity: enhancement
Pending code review of the module startup code. In principle, there should be no insurmountable problems.
After review of the code, restrictions have been relaxed to:
AllowOverride AuthConfig FileInfo Options=IncludesNOEXEC
This still provides opportunity for foot-shooting with ill-considered SetEnv, but you get to shoot your own foot only.