documentation_complete: true

title: 'Disable URL Correction on Misspelled Entries'

description: |-
    The <tt>speling</tt> module attempts to find a document match by allowing one misspelling in an
    otherwise failed request. If this functionality is unnecessary, comment out the module:
    <pre>#LoadModule speling_module modules/mod_speling.so</pre>
    This functionality weakens server security by making site enumeration easier.

rationale: |-
    Minimizing the number of loadable modules available to the web server reduces risk
    by limiting the capabilities allowed by the web server.

severity: unknown

identifiers:
    cce: 27276-5
