Re: [CSSVal] ports not allowed

I would prefer to allow all ports. The validators/checkers
are often used on testing and staging sites, and these use
all kinds of ports. Do we have any DOSes on the markup validator?
Is there some kind of pattern detection we could run?
What ports do we allow on the other tools? Also, how is
a request to the css validator to validate something on
example.org:80 where there is no Web server up different
from a request for example.org:1234 where there is no Web
server in terms of DOS? (or did I get everythin wrong?)

Regards,    Martin.

At 00:51 04/12/03, Bjoern Hoehrmann wrote:
 >
 >* olivier Thereaux wrote:
 >>I just had a discussion with Yves on the topic of bug #952
 >>http://www.w3.org/Bugs/Public/show_bug.cgi?id=952
 >>
 >>The CSS validator currently refuses to query ports < 1024 other than
 >>80, to avoid having it used for DOSes for example. This is a choice
 >>that makes some sense, although arguably this is not something we are
 >>doing consistently (with our other tools) and is not hugely useful.
 >>
 >>Anyone has an opinion on the matter (keep, loosen to allow ports 80-86
 >>for instance, remove)?
 >
 >I think we should have a consistent policy for preferably all only
 >services, I would be fine with removing the restriction or extending
 >it to just 80/8080/443 or whatever; I do not think we should have more
 >special ports (but clearly need a better error message IIRC).
 >
 >>Bjoern: would it be possible to document that in your FAQ for the time
 >>being?
 >
 >I gave myself an AI to do that and added the topic as an agenda
 >suggestion for our next meeting to the Wiki.
 >--
 >Bj$B‹S(Bn H$B‹I(Brmann $B%-(B mailto:bjoern@hoehrmann.de $B%-(B http://bjoern.hoehrmann.de
 >Weinh. Str. 22 $B%-(B Telefon: +49(0)621/4309674 $B%-(B http://www.bjoernsworld.de
 >68309 Mannheim $B%-(B PGP Pub. KeyID: 0xA4357E78 $B%-(B http://www.websitedev.de/

Received on Thursday, 2 December 2004 19:21:31 UTC