Add note on special character handling with FakeBasicAuth.
PR: 52644
@@ -1473,6 +1473,13 @@ The available <em>option</em>s are:</p>
directive within <module>mod_auth_basic</module> can be used as a more
general mechanism for faking basic authentication, giving control over the
structure of both the username and password.</p>
+
+ <note type="warning">
+ <p>The usernames used for <code>FakeBasicAuth</code> must not
+ include any non-ASCII characters, ASCII escape characters (such
+ a newline), or a colon. If a colon is found, a 403 Forbidden
+ error will be generated with httpd 2.5.1 and later.</p>
+ </note>
</li>
<li><code>StrictRequire</code>
<p>
