W3C home > Mailing lists > Public > ietf-http-wg@w3.org > January to March 2012

Re: Rechartering HTTPbis

From: Willy Tarreau <w@1wt.eu>
Date: Wed, 25 Jan 2012 14:58:16 +0100
To: Patrick McManus <mcmanus@ducksong.com>
Cc: Poul-Henning Kamp <phk@phk.freebsd.dk>, Amos Jeffries <squid3@treenet.co.nz>, ietf-http-wg@w3.org
Message-ID: <20120125135816.GH2413@1wt.eu>
On Wed, Jan 25, 2012 at 08:54:20AM -0500, Patrick McManus wrote:
> On Wed, 2012-01-25 at 09:12 +0000, Poul-Henning Kamp wrote:
> > , for instance
> >      by putting a blank line between them.
> 
> and another smuggling attack is born :)

Not necessarily if the places are mandatory. You must always have exactly
2 blank lines in a request and the problem is over.

Willy
Received on Wednesday, 25 January 2012 13:58:49 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:53 GMT