- From: Zhong Yu <zhong.j.yu@gmail.com>
- Date: Tue, 13 Mar 2012 23:42:12 -0500
- To: Amos Jeffries <squid3@treenet.co.nz>
- Cc: ietf-http-wg@w3.org
I don't see anything wrong if the spec sets a max length for method token. 64 bytes ought to be enough for anybody. If the method token does not terminate before server's limit is reached, the integrity of the request is extremely suspicious, I think a generic 400 is probably more suitable than 405/501. Zhong Yu On Tue, Mar 13, 2012 at 5:02 AM, Amos Jeffries <squid3@treenet.co.nz> wrote: > On 13.03.2012 20:20, Willy Tarreau wrote: >> >> Hi Julian, >> >> On Tue, Mar 13, 2012 at 07:53:37AM +0100, Julian Reschke wrote: >>> >>> Hi there, >>> >>> we just published the -19 drafts of Part 1 through 7 which reflect the >>> progress we made since early January. >>> >>> Overviews are in the appendices: >>> >>> >>> >>> <http://greenbytes.de/tech/webdav/draft-ietf-httpbis-p1-messaging-19.html#changes.since.18> >> >> >> Just noticed this after a quick glance over the diff : >> >> 3.1.1. Request Line >> A server that receives a method longer than any that it implements >> SHOULD respond with either a 404 (Not Allowed), >> >> => "Not Allowed" is 405, not 404. >> >> Regards, >> Willy > > > > Sort of in line with this. > > Maybe I missed it but is there any limit to the length of request methods? > > AYJ >
Received on Wednesday, 14 March 2012 04:42:40 UTC