- From: Willy Tarreau <w@1wt.eu>
- Date: Wed, 25 Jan 2012 14:58:16 +0100
- To: Patrick McManus <mcmanus@ducksong.com>
- Cc: Poul-Henning Kamp <phk@phk.freebsd.dk>, Amos Jeffries <squid3@treenet.co.nz>, ietf-http-wg@w3.org
On Wed, Jan 25, 2012 at 08:54:20AM -0500, Patrick McManus wrote: > On Wed, 2012-01-25 at 09:12 +0000, Poul-Henning Kamp wrote: > > , for instance > > by putting a blank line between them. > > and another smuggling attack is born :) Not necessarily if the places are mandatory. You must always have exactly 2 blank lines in a request and the problem is over. Willy
Received on Wednesday, 25 January 2012 13:58:49 UTC