Re: Extension HTTP methods

Ian Hickson schrieb:
> On Fri, 9 Jun 2006, Julian Reschke wrote:
>> Speaking of which, if this is a security problem: why hasn't it been 
>> fixed in Firefox 1.5 and/or IE 6SP2? Both seem to happily send CONNECT 
>> requests when asked for.
> 
> It was fixed in IE7. I would presume that the other browser vendors are 
> still weighing their options, and that that is probably why the working 
> group is still discussing this (given that most members of the working 
> group are browser vendors).

IE7 is an unreleased product.

IE6 is what's supported by Microsoft and which is in active maintenance. 
If there's a security risk in the current implementation, I would expect 
Microsoft to fix it there. Of course the same applies to FF.

Best regards, Julian